skysight-inc/HackerNews huggingface dataset:
>This feels analogous to leaving a laptop unattended in the back seat of a parked car and blaming the government for not stopping it from being stolen

To some degree, that's reasonable, but it also illustrates how low a bar Americans set for their society. Everyone is so numb to the existence of petty theft that we immediately blame the victim for leaving something in their car, or locking their bike up outside instead of bringing it inside.

But I live in a major city where I routinely leave my laptop sitting on a table at coffee shops unattended while I run to the restroom, or lean my bike against the wall outside a restaurant while I go in and have lunch. School kids walk or ride the metro home by themselves after dark. People turn in lost and found wallets and cell phones. If you lose something on the metro, there's actually a good chance you'll get it back.

Why do we act like ubiquitous violence and theft is just part and parcel to living in a modern city?
The problem is that the setuid program does have the same view of the namespace as its caller. When you run a setuid binary it inherits all aspects of the process that exec()'d it, including its namespaces.

Ok, so let's make this more concrete. The scenario we're discussing is a user who wishes to (illegitimately) elevate their privileges, and has the ability to mount, and in particular bind/union mount:

> mkdir ~/my-etc
> echo 'badperson ALL=NOPASSWD:(ALL:ALL) ALL' > ~/my-etc/sudoers
> mount --bind ~/my-etc /etc # note: you could also insert a command to bump us into a new filesystem namespace before this if you want, or assume that say logind did it for us, it wouldn't change anything about what happens next
> sudo -s
# rm -rf /*

This happens because sudo is a setuid program, and it inherits the filesystem namespace of the shell that ran it. In that namespace, the real sudoers file has been masked with a fake one that says badperson can sudo to any user they want, and so it lets them.

That this is the mechanism of privilege escalation that linux uses is fundamental to why mounting (and bind mounting) is a privileged operation. Plan9 does not have either root, nor setuid programs, nor filesystem-stored capabilities, and so does not suffer from this and you can manipulate your namespace to your heart's content.

> Plan9 has no better way than that, no way to make /bin rebinding work in a way that makes sense for privilege escalation.

Please just read some things about plan9 already.
I still miss Talk because was so easy and intuitive...
> If you haven't met your local elected representatives, that might be on you. It's not hard to meet them, and usually IME they make an effort to know voters.

Most of these proposals, and the things people object to, are at the federal level.

A Senator from New York has 20 million constituents. If she met with each one for one minute, sixteen hours a day every day of the week for her entire six year term, she would have met with ~11% of them by the end of her term. And still not really know any of them.

> We the people might be willing to fund schooling, but not other things.

We the people are the ones receiving the money. If you want to spend yours on schools, go for it. Someone else wants to spend it on books, or private tutors, or compensating one of the parents to take time off of work to teach the children themselves.

> But where is this coming from? Who disagreed?

The existence of many of these programs that don't work like this.

The government will subsidize your student loans, which inflates the cost of education, but you don't get the cash equivalent of the subsidy if you work your way through college busing tables instead of borrowing money, or attend a less expensive school. You can't get the money if you want to buy the books yourself and then follow along with the lectures on OpenCourseWare.

> How do you know that? School vouchers are popular, and people could have said the same about them.

I should say popular with elected officials.

School vouchers are popular with the public and yet most states still don't have them.

> These rants about government - that we see commonly - are somehow given a pass for establishing a factual basis and making strong arguments. But they don't really say much except express frustration.

The general problem with government programs is that there is a powerful incentive to direct money to politically connected groups.

Why do we subsidize ethanol? Because it's made from corn grown in Iowa, which is the location of the Iowa caucuses. Why are the swing states the largest per capita recipients of federal money?

To get at the root of this, you need to look into the details of thousands of pages of federal legislation. Because the complexity is purposeful. There is a broad class of programs whose general goal is to transfer resources to the poor. That entire class of programs could be replaced with a single cash money tax credit, but it isn't. Because the purpose of most of those programs isn't to help the poor, it's to create jobs for government employees or subsidize specific products which the public is then forced to buy if they want the subsidies even if preferable alternatives are available in the market.

The complexity keeps people from rooting it out. Ordinary taxpayers don't have the time to look through the details of that much legislation to find just exactly how the corruption and inefficiency is costing them.

So you end up with just a general feeling that the government is ripping them off and no obvious path to correcting it.
Steampunk Machine Learning
Police officers often lie about what can or will be charged for political reasons (or laziness reasons, or some other reason unrelated to what the DA supposedly will or won't do). That is why the parent said it might be propaganda.
The difference was that the nuclear-war threat was somewhere between at least plausible and imminent, whereas the "problem" of centralized control over the money supply never actually existed; it's a delusion based on a fundamental misapprehension of what money is.

HTH!
oneof works reasonably well. It's not perfect but it's fine.
Intentional, malicious disinformation campaigns should be viewed as fraud against the American public.
I had a girlfriend in high school/college for four years; I’ve been with my wife for over 15. Looking back on my high school relationship I can say I was in love, if I know anything about love from my marriage. The same feelings of interdependency and shared identity. It’s popular to look at young people and think they can’t know love but my experience says that’s not true.
Lots of assumptions made here simply to contradict one person's experiences.
How Stack Overflow users responded to Log4Shell, the Log4j vulnerability
I was downvoted in other threads for suggesting (perhaps in a ham handed fashion) that we shouldn’t rush to trust these one-sided articles about the rail theft in LA and shoplifting in SF. People are surprisingly quick to suggest we throw more tax dollars at these “problems” without questioning that perhaps an alternate explanation for the increased theft is due to years and years exploiting every efficiency possible in the supply and retail chains.

A store containing tens of millions of dollars of merchandise and “guarded” by a fewer and fewer underpaid employees eventually becomes a sitting duck.

It’s the same explanation for why our supply chains were so brittle in the face of the pandemic: years and years of streamlining.

Could there be societal or enforcement issues? Sure! But let’s be at least slightly skeptical when images of a few hundred yards of junk-strewn railway are plastered across every headline and trending list out there. The reality is often much more complicated.
> Just 3 dollars a month… if every piece of software I use on a daily basis cost me a few dollars then the usage cost would spiral out of control.

This sounds so much pithier than it actually is, but of course every reply will say it.

Does 1Password asking for 3 dollars make every other app on your computer suddenly need 3 dollars a month?

Every piece of software needs its own plan for continued development.

Some software you use exists because people work on it for free, some exists because massive ad-tech companies defiling the globe's privacy fund it, etc.

-

Paid subscriptions is one of those types, and as far as paid subscriptions go 3 dollars a month is bottom of the barrel.

Like if every paid subscription you had was 3 dollars how would your bills look?

Many MANY companies have tried one time payments and died over it. People are allergic to upfront payment. People just might not have the funds to pay a fair price all at once. A tech forum isn't exactly where to get perspective on that for example...

1Password clearly tried the one time payment model, and if I had to imagine for a second, I bet you one-time payment users ended up being some of their most expensive users since they had to manage disparate sync schemes.

Now at least subscription users can subsides that cost a bit...
Apple has >1billion active units worldwide, or one for every three and a half people on the internet. While the USA market is highly profitable their operational scope is much larger.
The Deadliest Virus Ever Known
>>> Chinese researchers are planning to use the moon as a shield to detect otherwise hard-to-observe low frequencies of the electromagnetic spectrum and open up a new window on the universe

Long held dream of radio astronomy. Space exploration is heading into sci-fi territory: Russia, S. Korea, Japan, India, UAE all launching lunar landers this year. As well as private sector US missions. What a time to be alive!

One can even book A Moon Box now ;)

https://www.astrobotic.com/
In Europe many people using iMessage everyday.

Even in mine family we're all on iMessage.
I had the successor to the nexus 6, the nexus 6p, and it had a noise cancellation issue that canceled out voices instead of the background. Made the phone completely unusable as phone. I rarely made phone calls and didn't realize the issue wasn't just sporadic until out of manufacturers warranty. Haven't bought an android since (I also really disliked the hey google stuff they were integrating at the time.)
I switched from Dyn to Namecheap (who is the registrar for my family domain) for their free DNS service. No issues but we really only use it for e-mail.
This article is heavy on the victim-blaming. Are we really supposed to shift some of our blame to the company suffering the thefts?

When the LA Prosecutor has made it clear that they aren't prosecuting the thieves, it almost doesn't matter how many or how few patrol officers Union Pacific has. If there are no consequences, catching someone in the middle of a theft is only a minor delay and inconvenience.
Dominant languages can spread even without coercion
50 years ago Return of the Jedi was still 11 years in the future? [0] Star wars was still 5 years away, Blade Runner 10. Colour TV on all networks was 7 years away [1] But hey, a house cost $28K, a car cost $4K, a quarter pounder of beef cost 16c [2] the convention that made Star Trek popular happened[3] (in two days). There was also terrorism, Watergate, the space shuttle programme, and the days of the week match this year (until that pesky leap day)

[0]: https://en.wikipedia.org/wiki/Return_of_the_Jedi
[1]: https://www.thoughtco.com/color-television-history-4070934
[2]: http://www.mytwodollars.com/2009/10/22/the-cost-of-living-in...
[3]: https://memory-alpha.fandom.com/wiki/Star_Trek_convention
Incredible! A work of art! Absolute ingenuity! Thank you for sharing!
I think you missed the meaning.

The point was not to use the virtual behavior of women to support equivalence in real world gender violence, but point out the absurdity of drawing real world extrapolations from virtual behavior, and the absurdity of making blanket judgements about groups as broad as gender.

As you rightly point out, there are plenty of real life examples of abuse, which I agree is an endemic problem. That said, we should be cautious about conflating a real problem with a fictional one.
> Some of the root servers are also in the EU, so there is zero dependence on the USA for resolving european ccTLDs.

What percentage of the organizations that run the root servers are non-US? There are thirteen logical root servers ([a-m].root-servers.org):

* https://root-servers.org/

Three (i, k, m) are not run by non-US legal entities: Netnod (SE), RIPE (NL), WIDE (JP).
Same thing here. Site seems down. I'm accessing it internationally, without a VPN.

To further the learning, can anyone guess which part of the stack is likely generating the error?
... and a well-deserved "Best Film" Oscar in the Academy awards, the first subtitled "foreign" film so awarded.
Nobody I want to communicate with uses Telegram, WhatsApp, etc. All of those people use iPhones, so we use iMessage.
macs make up 10% of apples quarterly revenue[1], with iphone being pretty much always at least 50%.

with something that makes up a practically annual or semi-annual purchase (iphone) vs mac (maybe every 4-5 years?) i think the social value plays a massive role, and the actual product simply has to have plausible deniability of being "good enough to justify the price."

frankly, iphones being $1k+ is part of their social perceived value.

nobody is saying iphones are bad. but apple throws its weight around in bad-faith ways. and they get justified by the apple bloggers. the "walled garden" is part of the prestige.

[1]https://www.statista.com/statistics/382260/segments-share-re...
Are you on a GoogleFi connection with their VPN service on in the background? :D
Especially when they are in collusion with the healthcare system.
Google Play Games for PC
You dropped so many brand names I’m starting to think there is something to this status symbol theory.
> a message system that falls back to SMS is useless

This. Most of the rest of the world ditched SMS a decade or more ago.
> According to the lawsuit, the inmates suffered from side-effects that included vision issues, diarrhea, bloody stools and stomach cramps. The inmates were also subject to payment of fees for medical examinations that they sought after experiencing the side-effects from the drug.
I'm strongly considering moving away from Obsidian to Logseq, obsidian just has some limitations that I think I can work around in Logseq (insufficient syntax highlighting due to old integrated version of prismjs being one issue for ex).

I have sincere doubts that Obsidian will ever go open source.
Site not accessible from outside the US? lovely.
Yellow journalism (https://en.wikipedia.org/wiki/Yellow_journalism) has been a thing since at least the 1890s.
This article is a bit pretentious.

I had an Android phone when RCS was rolling out. It never worked. Well before then, iMessage - like most message platforms - already did everything that RCS did and far better.

Thank gosh Apple (and other message apps) decided to keep improving instead of waiting on telecom companies to build and support this standard.

No other messaging app is as simple and easy to use as iMessages. I have no inclination to use FB/WhatsApp (though it's popular especially for international cases). I'm never going to convince all my friends to download and switch to something like telegram/signal.

iMessage is simply the best SMS/Rich messaging platform that, like a lot of what Apple does, Just Works.

I will never trust a google messaging service to last and be around in 5 years. They have a massive graveyard here.
Its 100W TDP, you know what else was 100W TDP? ATI Radeon HD 4850 from 14 years ago https://www.techpowerup.com/gpu-specs/radeon-hd-4850.c493
I imagine being a product manager at google is a special type of hell
This is a shame. Academia should be a safe heaven and welcome the diversity of thoughts
They pivoted to Hangouts to boost Google+ when they were chasing Facebook. This is also why they killed Google Reader. So much collateral damage with nothing to show for it.
Uber has an interesting approach to solving this issue: https://eng.uber.com/rethinking-gps/
This article does not mention the word 'security' even once.. Weird, considering the recent scandals and that company's reluctance to fix them on time.
It basically boils down to money. If Apple considers the move to support rich messaging, and it seems like it will shut off a revenue stream, they won’t make the move.

Keep in mind we’re largely talking about teenagers heavily influenced by peer pressure and for the most part wanting to spend their parents’ money on iPhones.

Blue vs green arms these kids with an actual reason to tell their parents.

If I was Apple, I don’t know why I would ever want to remove this high barrier to entry. Having it making me a ton of money.
I have a passport. I had to go to a US postal facility and talk to a real human, who took a real picture, we had a chat, I had to provide my old passport, and a month or so later I got the new passport and the old one was returned.

We have SSL certs. They /can/ issue certs, the govt /can/ be a CA. This is the real tech, it's been worked on for years and is actively worked on today.

Weird things are happening right now, all over the place, at many different levels of government; and I don't mean good things. I kinda think it looks like sabotage, hate to say it. (The State of Washington gave me a government email account last year to renew my drivers' license, and I could mint more.)

It's a wild ride, and it'll either correct or this is the "end of the Bronze Age", folks.
Lots of people on HN have clearly never worked for a cost center. If you work in a cost center like IT, employees never see the benefits of improved efficiency unless they do what this person is doing and not disclose their process. If they did, they'd simply cut his hours and return the saved money to the business. The people wondering why management wouldn't reward him don't understand that the business views IT as a necessary evil and not an area of growth. Budgets go down; not up.
Thank goodness no companies are using doctors to push their products today.
Hopping I won't offend anyone here. There's a history of alzheimer in my family and I actually know a number of families that had to deal with the third generation going cuckoo. I've always thought that, if it would happen to me, or to one of my parents, perhaps the only sane solution would be to kill them. I'm wondering if I'm the only one thinking this. It seems like most of today's culture is about keeping people alive as long as possible, even if they're not themselves anymore, even if they're suffering.
> That is part of the reason why there is a market for those fake plastic security cameras that don't record anything.

Why would people care about fake cameras, or real cameras for that matter, if they won't get trouble no matter what the image shows?

Fake cameras are only a deterrent because some of the camera looking objects are real. And real cameras are only a deterrent because getting caught doing something bad on them lead to bad consequences.

> This feels analogous to leaving a laptop unattended in the back seat of a parked car and blaming the government for not stopping it from being stolen.

Or the analogy is that someone stopped your car grand theft auto style and took your laptop from your bag.
Same state where the governor had the wisdom to make shoplifting below $1000 a misdemeanor and the prosecutor can't be bothered to do their job.

But yeah, blame the rail company, I guess?
Except at half power directed away from the air. Quoteddirectly from the article:

"We were not aware that the power of the antennas in the United States have been doubled compared to what's going on elsewhere. We were not aware that the antenna themselves have been put into a vertical position rather than a slight slanting position, which then taken together compromise not only the radio altimeter systems but the flight control systems on the fly by wire aircraft."
Just launched https://umbrellatoday.app, which is inspired from my personal frustration with umbrellas. The tool allows you to create alerts for rainy days, warning you to bring an umbrella.

The assumption is that we want to minimize our interaction with umbrellas; if you buy a big umbrella, it is a hassle to drag along and you will most likely loose it after a few afterwork drinks. Other way around, a small and cheap umbrella does not cover you enough, and breaks easily.

As said, just launched, lets see how it goes. Happy to hear your feedback.
Yes I agree. Even if it's not a perfect metric, it'd still be useful.
The article also says they're in charge of 36,000 miles of track. Presumably the trains are only in smaller segments, but that's still impossible to patrol it all. There is no reasonable amount of officers that could cover all of the parked trains 24/7 anyway.

Without any actual consequences for getting caught, it's basically a minor inconvenience for the thieves. More officers just means slightly more inconvenience.
> Which is to say incredibly hostile because people have come to view free Gmail accounts as a basic public service for which no payment will ever be required under any circumstances.

which is called entitlement. And i'm seeing more and more of this sense of entitlement as more and more people (esp. young people) being exposed to the internet - and this seeps into their other lives offline.
Units is not the same as actual people. I have a work phone and a personal phone both of which would be considered active Apple units.
I started a wholesale bakery.

It does about 20k/mo in revenue (we are not profitable).

It's been super fun and rewarding. It's much more like building a software / tech startup than I expected it to be.
Context matters. People might not be aware but the few miles around Union Station are probably the densest population of homeless people in the country. People who have nothing to lose are going to be more likely to commit crime. The societal breakdown in that area is not caused by the increase in crime. The increase in crime is caused by a societal breakdown that has forced over 10,000 people onto the streets surrounding these train tracks.
Depends on whether it took reasonable precautions. If you left a pile of gold bars in an unlocked shed at your vacation property, that you visit three times a year, I can be sympathetic to you if someone steals them, but I'm not quite so sympathetic that I'm ready to volunteer my taxes to fund 24/7 security for your shed.

I'm not an expert on what's reasonable when it comes to railway security (and neither are you), but from my layman's take on it, firing 85% of their security, and observing a 160% increase in theft seems like a "Union Pacific problem", not a "me problem".

They do seem to have a financial incentive, to the tune of 52 salaries to try to turn it into a "me problem."