skysight-inc/HackerNews huggingface dataset:
> * Objects with a default-deny bucket policy could not have been circumvented with the support team's escalated privilege. So if you have a policy that looks something like this, that data was not exposed

Service accounts are not constrained by customer bucket policies. In fact, not even SCP's are restricted by service-linked roles:

"SCPs do not affect any service-linked role. Service-linked roles enable other AWS services to integrate with AWS Organizations and can't be restricted by SCPs."

https://docs.aws.amazon.com/organizations/latest/userguide/o...
Supply chains are already moving from China as fast as possible. Access to western markets will disappear. No amount of rhetoric will change this.
Replace the words "facial recognition software" with "location data", a comparable commodity in this context, then it's immediately clear what would go wrong. See https://www.eff.org/deeplinks/2021/08/its-time-google-resist...

If the bureaucratic obstacles for using a technology are so high that only very well funded companies can overcome them, then those companies effectively form a cartel with the state in the use and abuse of those technologies.

If citizens had stronger protections against the application of the third-party doctrine in the US, we might have less to fear. Currently though, the greatest oppressor of personal freedoms through technology is the United States Government. They can and will use "guidelines and potential liabilities" to weaponize new technology while making it next to impossible to counter the threat.
I wonder if it's possible to combine all of these in a single docker container.
In case this helps, I recommend registering with nixle [0] for any emergency notifications to your phone. It provides more accurate and real time details from local agencies in your area.

https://www.nixle.com/
I wrote and published my 5th technical book
But isn't this imposing a runtime cost on safety? Isn't rust all about safety and performance?
They Tell Me the World Ends Interview [YouTube]
Just like apples, growing a tree from the seed from a Haas avacado will not result in a tree with that variety. They are duplicated by cutting branches from existing Hass avocado trees and grafting them into a root stock from another variety.

Also I guess all avacadoes take a few years to mature, but from what I read at around 5 years there should be possible to get fruit of some kind and that also means they should flower too?
But that doesn't address the questions about natural immunity at all. Assuming you already had it and that you were 100% fine and you're now forever immune seems extraordinarily foolish.
There is a rather roundabout route to compiling software to game of life cells that is pretty interesting. It is of course completely impractical but the idea that it could be done is intriguing.
This is a pretty thin article, of course. And as much as I dislike Jack for the decisions he made at Twitter - this is a pretty important topic to consider.

What does the future of the Web (3 or otherwise) look like, when capitalist firms can in a single swoop buy all the foundational concrete for it.
TikTok Made Them Famous. Figuring Out What’s Next Is Tough
I'd actually love to see if gait recognition gets screwed up by changing someones shoes (pebbles, extra size up, uneven platform height, etc)
Yeah, the original idea was excellent. Great for warnings or child abductions but now even the child abduction stuff is annoying. Some parents battling over the custody of their kids is now a child abduction
> Knowing that your computer is at 192.168.1.123 doesn't help attackers much

One can reconstruct your subnet scheme with a handful internal IP addresses, allowing them to locate potential targets faster once they get into your network, making attacks more efficient ("oh, so these guys have some vulnerable clients in this /16, it's probably dev, and I see there's another /24, which looks like prod").
I have basically the same approach. I don't absorb information that well from video because of the fixed pacing. I would much rather read which lets me speed up and slow down automatically. When I need to absorb a video, I find speed controls to be incredibly useful. For low density information, I set the speed as high as I can and still understand the speaker. This is like skimming a text. If the speaker gets to something high density, I will slow down or even listen to the section multiple times. This is like reading slowly for maximum understanding.

I am honestly a bit frustrated with how much information is getting locked up in videos as I find them a pretty poor format in comparison to text annotated with diagrams.
Dead comment by @nopenopenopeno. How can it be an Americanism when no country is eradicating poverty for all the people in their country + people who want to come to the country but can’t because of classist, xenophobic, and/or racist views.

Bringing up smaller countries like Nordics doesn’t help when they are largely homogenous and do not bring in many non western non white people in. While places like Europe and the west incessantly worry about migrant crisis. Even though countries like Pakistan have more migrants than most of Europe combined, but, importantly, with none of the money or structure or moral rhetoric.
> A key tradeoff is that Bronze does not guarantee thread safety

Data races are currently prevented by the borrow checker. Any GC in order to provide equivalent correctness would need to do so as well.
Yikes, that reminds me of the false ’we are all going to be bombed soon, this is not a test’ warning the people in Hawaii got… there should be penalties for false alarms like this.
> Just assume every engineer has access to everything.

Wise rule to live by. I would certainly advise everyone to assume that.

On the other hand geek_at was talking about a slightly different thing.
They were talking about how the media criticised FB for having too lax controls on private information. geek_at even called it an "outrage".

We can and should absolutely ask platforms to do better while at the same time playing it safe ourselves with the data we control. There is no contradiction there.

There is an other layer in which it feels we are talking by each other. You mention zero days, and yes those are a thing and yes an insider is in an excellent position to find them and exploit them. Finding them and patching them is a good idea for sure. (For many reasons.) But the FB thing mentioned wasn't about an exploited zero day. It was a company sanctified system and associated work practices. We can demand that a company develop better practices (where not every engineer needs this high of a level of access to do their job) without expecting them to find and patch every single vulnerability.
Why be less hostile to Nvidia? They still have yet to provide proper Linux drivers.
This sounds about right.

I'm not informed enough to comment on the virus or quality/efficacy/safety of any of the vaccines, but I am vaccinated, and have friends and family in both camps. All I know is that this is not a naive virus, I know about a dozen people who have had it, not everyone has survived, but everyone who has was genuinely afraid for their lives. That anecdotal evidence is enough to convince me to accept a vaccine/medication because I feel the risk/reward is favourable.

I can't bring myself to support mandated vaccination or making pariahs out of those who don't share my risk/reward considerations, however, because I think clawing back individual liberties that we give up is much harder than finding the compromises necessary to hold onto them in the first place.

I might be wrong, it wouldn't be the first time, but I would prefer compromise and tolerance to a knee-jerk reaction. There is already too much bad legislation born from "times of emergency" and such, no need to stoke the flames.
Yeah, this quote:

trying to find some kind of shortcut to just get my code working by copy pasta-ing random bits of spagetti and crossing my fingers. Stop. There’s a better way.

is about as honest as the Juice Loosener pitch from the Simpsons [0]. It's impossible to be able to just copy and paste something you find online and have it work, especially while ignoring all context and learning nothing.

0 - https://www.youtube.com/watch?v=kDiSWKaS3N0
I had enjoyed photography since childhood but avoided videos, mostly because of storage and management issues. A few years back I switched primarily to videography. It was mostly when my first child was born. Now I love videos so much, I only wish I had started serious videography long time ago.

The main issue now with videos is that I might record a lot of boring raw footage. Some of this boring raw footage, actually, has a lot of nostalgic value when viewed a few years later. But I also edit videos and create shorter videos that are more fun to watch. I do most of video editing on iPad because it is simple.

The storage seems cheap enough, I use Apple Cloud and local NAS backup.

One thing I am bad at is organization of videos. But I am really hoping that in next few years ML/AI will handle this part. It is already pretty good but not as good as it is for photos.
I learned Python. (and continue to learn)

I’m not a developer, and have no plans to become one.

I’m a product manager, so my initial reason for starting was so I could better communicate with developers regarding effort and ideas.

But I also wanted a hobby to challenge my brain and allow me to create.

I’ve spent a considerable amount of time learning/doing. Starting with about 3 hours per night for 3 weeks to start - now it’s dependent on the projects I build.
Cisco and Juniper don't support them either (at least last I checked), even though I am pretty sure they ship openssh.
I love the art style of sprites.

Is there any software to turn a picture into a sprite like image as shown in the article at varying resolutions?

It would be cool to turn my room into a street fighter 2 like set of sprites.
Great software, but building it from source is complicated, as libraries need manual patching. And on Linux from version 11.6 they introduced custom binary installer, that's useful for beginners, but for power users and flatpak packagers it only brought problems.
> In earlier times the Confucian pacifist ways of China

Imperial China was not pacifist. A basic model of Chinese history, which IIRC came from scholars in imperial China, was that China repeated a three stage cycle (from memory, the terms won't be exactly right): ascension (of a new dyansty) and prosperity -> decline and corruption -> chaos (and war) -> ascenscion ....

China's borders reguarly changed through force. Look up historical maps, for example. However, China had no peers in size and wealth nearby, and therefore didn't fight existential wars.

I'm not sure Confucian philosophy is pacifist, regardless.

> China were not up to the aggression of Western Europe, the US and Japan

They were not up to the technological advantages of the industrial revolution, and took a long time to recognize it and to change. In the early-ish 19th century, the Qing emporer wrote a famous letter to the king of England saying that China did not need their trinkets (industrial revolution technology) that the subordinate king (I forget how that was implied or expressed) offered, apparently not realizing the severe disadvantage. Even after the subsequent brutal, imperialistic attack on China, seizure of ports, and forced trade, the Chinese emporers tried to minimize change, IIRC first trying to just buy military tech without the infrastructure of knowledge, training, skills, etc.

Even today, the CCP seems to think it will have a wealthy capitalist country without a free market (which itself requires freedom and free thinking).
Except it's not actually a daemon, it runs as a child server process of inetd, tcpserver or (blech) systemd.
It's not a big deal if you're only running one thing on the computer. The wasted cycles could have been used by a different process to do something else. Multiply this mindset by many services and applications and suddenly the computer is slow when it doesn't have to be.
I experienced my first and only earthquake (5.8 magnitude) while visiting the holocaust museum in Washington DC. It was very out of the ordinary for the region and so as strange as it sounds, myself, my family and some other people present all thought the shaking was a part of the exhibit and simply carried on.... only for a security guard to come running in several minutes later to kick us out of the building.

I think earthquakes can by easy to miss sometimes for those unused to them because they feel so mundane. Like everyone's experienced a certain degree of shaking before, heck the turbulence in a plane isn't much different. This obviously changes at higher magnitudes but really changed my perspective.
The article seems geared towards someone working from a book or guide at their leisure. Building things up from first principles is a great way to learn but I personally never have time for the approach on the job.
These are great, but it's too bad they need to be so siloed. All of these applications are popular partly because they're on the _internet_ where we can link between things. I'm not likely to click a Medium link and then go find that item on my scribe instance (for example).

It would be interesting to find something similar to how you can choose which application will open files of a given type on your desktop. You can choose if web links should open with Chrome, Firefox, or Safari. What if we had a layer where you could choose which "application" opened medium.com/* links or youtube.com/* links? _That_ would be an awesome resource.
Charlatans begone. 2x is a fashion statement and Ive been learning at a much faster rate for quite some time.

The real answer to speed learning, is to watch the video at 200x, in a concrete room buried ten meters deep, with your nose pressed pensively to a 50" flatscreen surrounded by a frigid black ocean of PA speakers and amplifiers. Ive found that in five to seven hours, Ive fully comprehended the video as it "repeats twice", ad infinitum.

now, the volume is critical as it is not to concede 110db at any time. this promotes learning at 200x the volume of the original video. At the end of your learning session it is important to remain unclothed, as this promotes the knowledge to absorb into your body fastest whilst the room leaves you in inscrutable darkness, to succor a distant memory of the learning materials interdisciplinary themes and objectives.

Once youve climbed from the pit --and washed the learning jelly from yourself-- then you will have attained full and complete knowledge of how to properly tie a tie, or water a houseplant, or whatever you should need to learn. The pit will remain there for you should you ever dare to utter another question in wonderment.
Once the genie is out of the bottle...
Sounds like you could give people ptsd if you made that your ring tone.
Factor 5 Leiden. A genetic clotting disorder was the major underlying cause. I was poisoned a few years ago and that caused it to go crazy.

2 days without blood thinners and symptoms start returning hard.
I've been a software engineer for 25 years and I think people overly romanticize this attitude and we should properly fix things more.
also, with epairs you can do some really flexible networking stuff on freebsd between jails/jails and the host system and even jails and ipsec tunnels.
Ah I see, ok, but that's not what I meant. I meant: if you are going to spend 300 hours of learning time versus 200 to learn the same content then you can spend the other 100 hours on something that is billable. People tend to not want to pay for time spent learning so that's an investment on the part of the learner, and a smaller investment with a higher pay-off translates into a better ROI.
The first premise when using a vendor is trust. If you don't trust them then don't use them. So far, AWS has proven to be trustworthy in my opinion. From what little I've seen about their operations they seem to give a damn and you have to assume that iceberg goes deep.

If you don't trust them, don't use them. Provide evidence to your leadership of malicious intent and provide an alternative and they'll back you.

Executives make decisions based on a small amount of evidence and go with their gut from there. So far AWS has a good reputation but if they're not careful the mood could change quickly. I don't think something like this shows any malice and I have to just assume any cloud provider _can_ access all of my data but chooses not to in order to preserve their reputation which ultimately generates more revenue long term than any single piece of data.

Why would AWS risk breaking the money printer?
> We have iPhones because we had capitalists who conceived that we could have such things, gathered people who could invent the things, gave them direction, and then organized the complex factories and supply chains so that workers would have a place to come to do their part.

TIL only capitalists can invent products.
Hey. I'm building an app that'll allow us to track our taxes across our stocks, crypto, and NFT transactions. This way, we don't have to find out how much we owe when we file taxes and can instead plan ahead. The app will give you a real-time tax estimate and alerts for when to sell certain assets to bring down your taxes, legally.

My goal here is to help the 100M investors save $5,000 a year on their capital gains taxes so that in 10 years, I can have helped us save $5 trillion in taxes!

Here's a link to how it works: https://www.loom.com/share/352ba01902ec4ddcb31870ba8e1ce3ba

For the record, I'm not pro or against taxes, but why pay more than we need to right?

Would love some feedback on it. My email's jaimindesai@reconcilemoney.com!
> All of that said Bitwarden is a fantastic product and I recommend that over every other server-based password manager out there.

Do you want to share what makes you think Bitwarden is superior to other selfhosted, open-source solutions (e. g. Passbolt, Passwork, Psono)?
Beware the CopyLEFT Trolls
> "Once I got used to writing in Rust..."

How long did that take and what resources did you use to learn?
I just started making my own yogurt, it's fun, cheap, and really tasty!

The basic process is the same between recipes (eg https://www.seriouseats.com/homemade-yogurt) but it might take a couple of failures and tweaking (take notes) until you have something that works for you:

* Buy a food thermometer (also super useful for baking and cooking meat!)

* Heat milk to 85C

* Hold between 85C and 90C for 5 mins

* Cool to 50C

* Add a spoon of yogurt (make a new batch before the old one runs out!)

* Keep above 35C for 3-12 hours. You can use the oven with the light on, wrap the yogurt in a blanket and put it in the hot water cupboard, or I like to put it in a cooler alongside 2x as much boiling water in another jar.
Breaking down the Monty Hall problem as seen on Survivor
I don’t have much faith in the privatization of public services like this—see private prisons, private schools, etc.
Creating Cool Games with Ebiten
Sounds like you're only considering Debian and Ubuntu builds
> Bell concluded, therefore, that the focus for American educational systems should not be on national integration but, rather, should be on improving the quality of education provided for black students.

More depth is given here,

> "From the standpoint of education, we would have been better served had the court in Brown rejected the petitioners' arguments to overrule Plessy v. Ferguson," Bell said, referring to the 1896 Supreme Court ruling that enforced a "separate but equal" standard for blacks and whites. While acknowledging the deep injustices done to black children in segregated schools, Bell argued the court should have determined to enforce the generally ignored "equal" part of the "separate but equal" doctrine.

Via https://news.stanford.edu/news/2004/april21/brownbell-421.ht...

If you don't want the lights on, you are in fact asking for the lights to be turned off. There is no third option. You may prefer the answer to be stated in a given way - and this is a game that CRT proponents play - but logically the conclusion is the same. If you don't support desegregation, you are in favor of segregation.

I know a different group of people who are pro-segregation, believe racism is a fundamental non-resolvable struggle and think we should be keeping the races separated: that is literally the alt-right platform.
I wouldn't say that it's less portable than using your custom txt file file format.

But sure, in order to really make it shine and you'll want to use Emacs and something like orgzly on the phone.
I remember first seeing it somewhere on cr.yp.to, where it was counted with some regex that did something like splitting it on some delimiter-like characters.
Isn't Italy topping the charts of countries in financial ruin? If it weren't for Greece being worse Italy would be in the headlines. If America is to change laws, it'd help to use a successful nation as an example
Yes. As I wrote in https://news.ycombinator.com/item?id=29663566, service accounts are not constrained by customer bucket policies. In fact, not even SCP's are restricted by service-linked roles:

"SCPs do not affect any service-linked role. Service-linked roles enable other AWS services to integrate with AWS Organizations and can't be restricted by SCPs."

https://docs.aws.amazon.com/organizations/latest/userguide/o...
Microsoft Edge may be sending search information to Microsoft
Presumably Bezos would spend more money on space travel. And Warren Buffett or Bill Gates would spend more on charity. And Larry Ellison would buy another and bigger yatch. Or Elon Musk would just keep it in a bank account.

Which one can feel on way or the other about, but it's disingenuous to claim that's nothing. It's not nothing.

So make the full claim you want ("I support laws that tax the rich and decrease their freedom, so that poorer people can have a stronger social safety net and more freedom."), being honest about all sides, instead of the edited version ("I support laws that increase freedom for everyone {because money doesn't have value to rich people}.").

And recognize that if it's moral umbrage you're taking, the same reasoning extends down the income scale. (Making the assumption that you're not making minimum wage, and I'm not) Presumably someone who is making minimum wage would believe many of the things we do with our additional income, but would not do without it, are "not meaningful."
that is attacking a strawman that the comment did not make. It IS a paradox that people want information to be free but not if other people use it for advertising.
> don’t try to look smart. Try to solve the problem.

Then see if there's a better way to do it that looks smart.
If you read the paper, they needed to throw out the thread safety from Rust's borrow checker in order to make the GC work. That is a massive surface area for bugs they are opening back up to make the language easier for beginners.
But of the Western countries the only one that broke out is USA.
Like the OpenSSHd project?[0]

[0]: https://www.openssh.com/
I think the cursor alternative works best with Go's syntax.

it := GetAnIterator()
for it.Next() {
it.Value()
}

This still allows composition of different iterators, for building up lazy/incremental processing.
That's an excellent point, especially since AWS has a big Java presence.
What scripting language will some kid use to take these things over and how many lines of code will it be? Any predictions? Will the kid reprogram everyone to be labelled as a terrorist, or just remove their vax status? What future fun can be had with these? Will these be used in the future as a car/house key? Authentication to financial institutions? Food preferences at restaurants? Anyone with these implants demo them at blackhat or defcon yet?
EEP 16, which is german software and iirc not well localized. Graphics are 2005-level, but it has a lua interface which you can use to automatically manage driveways and routes.