skysight-inc/HackerNews huggingface dataset:
I don't know about jail/prison guards but for cops the official standard for shooting some one who is running away is something like "reasonable belief that you are a danger to the community", "reasonable" might not be the specific standard but regardless it's pretty trivial for an attorney to argue that a guard believed (in the moment, and they only have to believe in the moment) they were justified.

edit: here we go https://en.wikipedia.org/wiki/Tennessee_v._Garner "the officer has probable cause to believe that the suspect poses a significant threat of death or serious physical injury to the officer or others." that is of course for a suspect. If you've been convicted the standards are probably much lower.
Twitch does follow a power law, but from the leaks, I was surprised as to how many people are making high-five figures/year from it.

But no, it's not a 'career' I'd recommend to anyone. The net expected value of becoming a local theatre actor is significantly better than Twitch...
Said money will be recouped when they sue the people flooding them under the CFAA and seek damages.
I had no idea otters could be aggressive. How often do otters attack people? Are they territorial?
Yikes! You're wanting to raise my monthly payment by $170 per month after 5 years. I saved for years to buy a house so I would have a stable platform for raising a family, not to get rich.

It sounds like you're just wanting to punish people who saved their money and put it in a wise investment, when actually, that's what everyone should be doing.
> 8+/10+ hour streams every day respectively, while taking 1-2 vacations per year.

Sounds like the live of very many self-employed people.

Like even if you just have a small shop going with 10h a day 6 days a week without vacation for many years isn't that rare of a story to hear.
You seem to be arguing yourself in a circle.
Maybe they've been too busy over at Wikipedia to have time for HN?
Uncontracted title: "June 30, 1876: Peter Kropotkin Escapes from Prison, A Tale of Derring-Do on the Occasion of His Birthday".

I had wondered who the heck Kropotkin was.
Apple Document Suggests Sony Considered Bringing PS Now Gaming Service to iOS
Or you’d use a cloudfront lambda and combine both?
The tax code is absolutely used as an incentive and punishment structure to guide behavior. Things are made tax deductible or not all the time. We don't need to get into questions of morality. And there's no issue with enforcement here. You say it's not deductible and maybe you audit their books after a few years. If they tried to write it off, come down on them like a ton of bricks.
You're pre series A, yet you're calling a potential $2.1 billion competitor "incompetent". I find that a turn off. Never refer to the competition as incompetent - it will ultimately lead to complacency. Just my 2 cents :)

The rest sounds good!
There is a difference between picketing-- which is refusing to work-- and actually sabotaging company systems.

The DDOS would fall under (among, I'm sure, other laws) the CFAA and could be a felony if someone wanted to pursue it.
Every time I see a situation like this one, I tell myself: "What a wonderful opportunity to go outside and smell the roses".

P.S. A comment from an exhausted engineer to another.

P.S.S. Seriously, I need to get out of the house more.
Desired distance in cm here I'm assuming?
my only point is that PGP had the same opportunity and failed for nearly three decades, in comparison

in both there are opportunities for people with zero understanding to use a platform created by someone else. crypto asset sector has been more successful.
I have aphantasia, but this exact state (just as I fall asleep) is the only time I can consciously see images in my head. It’s very odd
That is incorrect. Cross az fees are steep.
Apps do send metrics from the process itself. Dropwizard metrics comes to mind. Wonder what timing RCE is waiting to happen there.
I saw part of a John Wick movie on TV last week and recognized the C64's that the crime syndicate used. Seeing them made me smile.
Just because you don't agree with a political position doesn't mean you should be willingly violating the CFAA and encouraging others to do so.
I guess it works both ways... personally I wouldn't call that professional, but OTOH they're looking for a somewhat specific person & culture fit, so good on them for advertising THEIR office/business culture...?
He has far more experience working 60+ hour weeks then I do, so I defer to his wisdom in this case.
The intent to access systems in an unauthorized way in order to disrupt those systems-- the clear intent of this script-- would fall afoul of the rather broad CFAA.
Moray was my favorite 3D app back in the day, and then I fell out of 3D. Then recently I wanted to model a project I wanted to build out of glass, and tried to do so in Blender but couldn't figure out how to get refractive surfaces not to show polygons (I'm a Blender noob). Really made me miss working with Moray+POVray where the primitives were geometric shapes rather than polygons.
Its not transparent at all. A massive amount of services were hard down for hours like SNS and were never acknowledged on the status page or in this write-up. This honestly reads like they don't truly understand the scope of things effected.
He IS a very top player (solo Challenger, top 200 in 4/5 roles in the game). There's not a chance in hell he's able to go on autopilot at that point, even in slightly lower rank games during his grinds where he has to try and win losing games with a team that's not good enough to help him do it. The only reason he's not playing as a salaried professional is that he's in a bad region to do so and makes more being a personality.
And then a dozen others will jump in saying that regardless of the actual authenticity of the experience it doesn't count if you did it by directly altering brain chemistry rather than indirectly altering brain chemistry.
I work on robotic space missions and we have an old janky tool that does modelling of lunar insolation for upcoming lunar rover missions (for solar panel insolation, prediction of ice, etc). It was with an odd mix of horror and delight that I looked under the hood and found POV-Ray. I played with POV-ray as a teenager (30s now) and was amazed to see it still in use.
I saw pleeeeeenty of untested code at Amazon/AWS. Looking back it was almost like the most important services/code had the least amount of testing. While internal boondoggle projects (I worked on a couple) had complicated test plans and debates about coverage metrics.
‘The Internet Is on Fire’
The accident happened so fast. How would anybody be able to take over fast enough if your hands aren't hovering directly next to the wheel?
I don't think I'm misunderstanding. Here's a quote from the article.

"The point being made here is that we do not assign any moral value to decreasing the well-being of those who are better off ..., but we do assign more moral value to increasing the utility of those who start from a lower base."

That's explicitly 0 weight on those who are "better off", leaving all the weight for those with the lowest utility. That's precisely the Rawlsian function. Traditionally Rawls only described the most extreme version, but softer versions with weights that are not all zero or one, but follow the same pattern are in the same family and also generally called "Rawlsian".
Both are attacks on availability in an IT context which is what makes it illegal. The goal is to cost the company money by reducing their ability to use recruiting systems, which is rather analogous to taking down a website in the eyes of the law.
Why does Minnesota sometimes get colder than the North Pole?
>it's about plausible deniability and keeping AWS out of the news cycle.

How'd that work out for them?

https://duckduckgo.com/?q=AWS+outage+news+coverage&t=h_&ia=w...
His name was Einstein, which means literally “one stone”.
that wasn't a crash! the car simply decided that the turn was dangerous and took it upon itself to disrupt the road construction industrial complex by forging a new and safer path.
previously discussed at https://news.ycombinator.com/item?id=28852857
I took away from the article that it's likely merely cosmetic at this point, but concerns have been raised that:

1) The run-down look during peacetime subtracts from the 'gravitas' the ship can communicate to the world and

2) The smaller crew this more automated modern ship has might not be large enough to complete the common scraping and painting maintenance that ships require to stay ahead of rust
Requiring price transparency is a step in the right direction. We didn't get in this mess all at once and we wont get out of it all at once. Relentless continuous incremental progress is the way to accomplish anything.

So, after price transparency what is the next step to reach the goal of a healthcare free-market? I say it would be competition. Once prices are known publicly then it becomes easier for independent doctors to compete on price. There may be barriers to competition like limits on number of medical doctors that are granted licenses or something to that effect.
I rather suspect that anyone reading about this-- whether computer literate or not-- will suspect in the back of their minds that this thing is not legal.

Turns out those hunches are pretty reliable, who woulda thunk it.
Unlike many crypto enthusiasts, I’ve never been allergic to the word governance or governing framework and have aimed to inspire on the forms it can take, even within national representative democracies.

Blockchains, distributed ledgers, allow for us to reevaluate what governance is and entails. It is expected that some processes of existing governments because redundant, and that there is some kind of governance occurring to coordinate behavior.

So here we are actually agreeing, except on where the best practices come from, which would be cypherpunk mailing lists, old bitcoin wikis, and protocol specification drafts and ratifications.
Thanks! I will definitely check that out!
What I found most interesting:

> His latest Twitch deal includes a performance quota; he streams 200 hours a month.

50 hours a week of on-stream time! And any other business/branding/merchandizing must happen on top of those 50 hours where he already has to be 100% on. It does sound exhausting.
That sounds pretty big and expensive.
I'm building something similar for metaverses, although with less emphasis on VR currently. See https://substrata.info/about_substrata

Currently it's a relatively simple bidirectional protocol over TLS. It's not fully documented yet but you can get an idea of it by looking at an example bot client in python: https://github.com/glaretechnologies/substrata-example-bot-p...
> When you reach your skill ceiling, you have to work hard just to remain there

Top players hit the ceiling of the MMR system before they hit their skill ceiling.

When you get to the very top of a ladder, matchmaking stops working correctly. Partly because the top few players are insanely good compared to everyone else and partly because there are literally not enough people online at any one time for an equal match to be made.
carbon copy of our experience.
> As the runner moved past Spencer with the otters in hot pursuit, Spencer somehow became the target.

You don’t have to be the fastest - just don’t be the slowest
Quite possibly I misunderstand on what level you mean that, but I think the devil is in the details, and "drag and drop your computer architecture" seems as unrealistic in practice as "drag and drop your application" turned out to be.

Unless you mean "architectural components" at such a high level that you don't mean to define (say) a CPU architecture, but basically just adding "device" soft cores to a common bus (or multiple) and configure their parameters, and where they are mapped in the address space and so on. In which case, that pretty much exists already today!

Quirks aside, you can totally drag, say, soft cores for a CPU, a few 16550A serial ports, video output devices, ethernet controllers, USB controllers--whatever you can think of essentially--into a Vivado block design, attach them to an AXI bus (whose structure you can also define graphically with many bus components to chose from), configure the memory map (or accept the defaults), and have "a computer".

Depending on the nature of your computer it might not even be much work to then get it to boot into Linux through U-Boot, with a device tree generated by the toolkit.

But I can imagine a simpler, "dumbed down" (in a useful way) more dedicated piece of software where this could be possible without knowing much of anything about FPGAs, yeah.
> You can take it on bad faith, but they own up to the dashboard being completely useless during the incident.

Let's not act like this is the first time this has happened. It's bad faith that they do not change when their promise is they hire the best to handle infrastructure so you don't have to. It's clearly not the case. Between this and billing I we can easily lay blame and acknowledge lies.
I don't think that's true again. USA deports more illegal immigrants than any other nation. There are "sanctuary cities", but they only work when you are pristine clear before the law: one administrative mistake (which are easy for illegal immigrants, and often engineered to be this way) -- and you are eligible for deportation.
It does seem like I'd have to maintain the same level of alertness and attention as when driving, in order to have the continuity of awareness needed to react. Including having my hands on the wheel.
Linus, Anders, Lars Bak (and my humble self) are all Scandinavians. I have been told [far too many times] that we tend to be rather "direct" which often clashes with other cultures (most extreme counter example I've seen are the always polite Japanese).

I have no problem with people with an attitude. I just don't always agree with them (all of the aforementioned included).
Ten years of experience, still failing phone screens
You should look at the MS in Computer Science offered by Georgia Tech. It’s not free but very reasonable.
Yeah, teams go to a lot of effort to have zonal environments/fleets/deployments... but there are still many, many regional failure modes. For example, even in a foundational service like EC2 most of their APIs touch regional databases.
I feel like the first person in security who used the term 'nation-state' read it somewhere but didn't know what it meant and now it's meaningless.
>I wouldnt hold out much hope of a flat earth tribe being able to deal with objective reality well enough to aid me.
I'm pretty sure there is selective pressure towards being rational, it's just really hard to select for and even then probably not the most important thing.

I'm pretty sure there is selective pressure against being rational. Take your drug addict. The flexibility to rearrange his whole worldview likely increased his fitness significantly. Now he has a support network and community, not to mention the help with addition.

To put it differently: While joining rationalist tribe may confer more fitness than joining the irriationalist tribe, the best fitness is having flexibility to adapt to any tribe you can and not be alone.
>I will say that random numbers as a service is a viable business opportunity

How do you compete with the free CSPRNGs provided by the operating system?
an entitled (born in aristocrat, land-rich family) propagandist who worked hard to ruin his country (Russia) by pushing it towards communism/socialism. https://en.wikipedia.org/wiki/Peter_Kropotkin#Activism_in_Ru...
>Same with childless multimillionaires - it’s not like you are born into being one.

I'm reasonably sure you're not saying no one is born into wealth, and I'm equally sure that all multimillionaires are born childless
Quiet down Icarus.
> Democracy solves the Byzantine agreement problem just fine already.

Democracy is just two wolves and a lamb deciding on what's for dinner.
The rust gives me the Russian submarine fleet vibes, which is unfortunate.
> I disagree. Twitch/YouTube/TikTok didn't create a new kind of millionaire. They're simply celebrities.

Yes and no. They are celebs, but definitely a new style of celebs. They are your average Joe, with barely any special skill. They could be your neighbor or the dude next to you in a supermarket, and you wouldn't know. Furthermore, they are millionaire working from home, growing from home, with average equipment and average products. This is something which never happened before, not at this scale.

Though, to be fair, there are also some actual skilled people growing into this space and celebs from other areas are breaking in too.

> There is no "new industries", it all still falls under the entertainment industry umbrella,

Yes, obviously. But the type and quality is completely different to established entertainment. It started with people with the bare minimum of entertaining-skill who established this. People who wouldn't have been able to succeed in the classical entertainment-industry. And this absolutely is a change. For the industry itself, it also is a change, because those people are cheaper and have a different angle to play at. This is more on the quality-level of a tupperware-party that somehow went up to a global scale.
>My comment says "how do we know there's no conflict of interest".

I never would have guessed that from your sarcastic comment and hand-wave to an article, followed up by "My point is simply that "scientific consensus" has lost some of its brand value." and scare-quoting around experts (implying, you know, that they aren't experts).

But you are correct, I conflated lolsal's interpretation of your comment with what you had said. My bad.
I don't want to have to strap a fucking telephone to my face to go to some shitty fake job. Please don't build this world.
Always had problems with choppiness with shairport-sync. Currently running MPD which feeds in to Snapcast for sending audio to clients.
This looks like a great project, thank you.

One aspect of censorship resistance is the ability for people to publish and read content anonymously (or pseudonymously). Could you add something to the README about that threat model?

Also, I see that your IRC channel is hosted on Freenode. That seems an odd choice for a project that is opposed to censorship. Please consider a network with a better track record in that regard.
A reverse chronology of some Python features
Tell HN: The software run by nearly every CA is affected by Log4J
PrmeKey's EJBCA[1] is the de-facto standard of PKI software sold to certificate authorities (CA). EJBCA is a Jboss based J2EE application that heavily uses log4j. And it heavily uses log4j and also seems vulnerable to log4shell.

This will end badly because despite the big talk of most CA's hardly anyone has an HSM. Secrets usually are in a database in several places I worked at. And those that do have an HSM it's just a Gemalto "soft HSM" running as a "VM appliance".

[1] https://www.ejbca.org/
> Why are we doing this folks? What's making you so angry and contemptful?

Because Amazon kills industries. Takes job. They do this because they promise they hire the best people that can do this better than you and for cheaper. And it's rarely true. And then they lie about it when things hit the fan. If you're going to be the best you need to act like the best, and execute like the best. Not build a walled garden that people cant see into, and hard to leave.
It is still possible to RCE, but you won’t be able to achieve it using the proof of concept code. See the article for resources that describe alternative methods to exploit.
And just like that, Peloton shares tank after fatal cameo
It's 2006, you work for an 'online book store' that's experimenting with this cloud thing. Are you going to build a whole new network involving multi-million dollar networking appliances?
This is not unique. The reason is simple.

1) If you keep status green for 5 years, while not delivering anything, the reality is the folks at the very top (who can come and go) just look at these colors and don't really get into the project UNLESS you say you are red :)

2) Within 1-2 years there is always going to be some excuse for WHY you are late (people changes, scope tweaks, new things to worry about, covid etc)

3) Finally you are 3 years late, but you are launching. Well, the launch overshadows the lateness. Ie, you were green, then you launched, that's all the VP really sees sometime.
This is great - a huge reduction in memory usage and a huge performance win. Great to see DGraph improving so considerably with this release.
Sellers never should have give you the keys until they had the money. That is on them.
It's actually a lifestyle common for many self employed people, not just streamers.

But also e.g. startup entrepreneurs.

Or people with a small one-person shop.

or even the movie industry, everyone from the industry I have spoken with agreed on the lifestyle many involved peoples is so bad that many end up needing drugs to goo on sooner or later.

But I tend to linger on twitch and there are many streamers which might just earn comparable to a slightly better employee job, but which have a much more healthy life style. Like streaming with a (somewhat) stable schedule, <=5 days a week. Taking holidays and not streaming too long. Through platforms like Twitch, YouTube and especially TickTock make taking holidays REALLY hard. And it's really not easy to get right.
The Tsarist autocracy that he was chafing against was doing a pretty good job of ruining its country prior to the February revolution.

And if the provisional government did a better job of turning that train around, it's unlikely the October revolution would have been successful.
Your situation is pretty common actually, unfortunately.

Keep learning new, valuable skills that will never expire and will only compound your value and keep applying for new jobs while you already have your current one.

Reduce consumption, invest as much as possible in indexes/tech stocks.
this caught my eye as well. i'd wager that it was not configured.
is log4j also has this security issue or this is only in log4j2?
I find that a turn off. Never refer to the competition as incompetent.

Agreed - never mind "professional" or not; it comes across as intellectually shallow.

Companies can lack vision, or simply taste, or get in over their heads or stuck in a groove ... and lets face it (in rarer cases) some are outright delusional -- but if they get to the $2b stage, it is difficult to call them meaningfully "incompetent".

If you think they are, odds are its you who's missing something about the bigger picture.
I work for one of the Big 3 cloud providers and it’s always interesting when giving RCAs to customers. The vast majority of our incidents are due to bugs in the “magic” components that allow us to operate at such a massive scale.
Your evidence for this? It took a whole damn team to build a single website with "HTML programming" back then. Software was still shrinkwrapped. Modern platforms on web frameworks with CI/CD I think make today's dev a hell of a lot more productive.
I believe Iris can talk to the Snap server directly for volume control, when you've configured it in the UI.
> While my boss was on vacation I took over for him in the "Launch readiness" meeting....once a week

Jeez, how many meetings did you go to, and how long was this person's vacation? I'm jelly of being allowed to take that much time off continuously.
When is the last time they had a single service outage in a single region? How about in a single AZ in a single region? Struggling to find a lot of headline stories? I'm willing to bet it's happened in the last 2 years and yet I don't see many news articles about it... so I'd say if the only thing that hits the front page is a complete region outage for 6+ hours, it's working out pretty well for them.