skysight-inc/HackerNews huggingface dataset:
That's a valid concern, It makes a lot of sense to store files separately on a dedicated file server, your TIP should only track hashes.

I have heard both good and bad things about openCTI. But you can say the same about MISP as well. I agree people should check out both. But IMO, I have seen people pick a TIP like this without a long term evaluation and it always ends up with some important thing you want to do with it but that isn't possible, practical or supported. I think there are better platforms tha MISP (depending on use case), but if you just have a bunch of intel and you want to put it somewhere and let the rest of your security stack integrate to operationalize that data, MISP is the best. Then see if all the other platforms can meet the same needs and if your team and resources can save time/money without it.

I also like how I don't have to worry about MISP taking a radically different direction (thehive and their dbms for example) or lose support down the road (cuckoo and its many forks!) because someone is paying to support it. Love the devs too, they don't get enough praise!
right? I was blaming my attention span...
No, the controversial statement in question was the claim that "18 is awfully old to start learning something for the first time" wrt programming.
Developer burnout or attrition for various reasons is a real thing.

If salaries drop, even more programmers will leave the industry, so its a natural balancing effect.
I think this is one of the better lists out there. I own almost all of the books in this list.

But don't get your hopes up too much. I'm still a lousy programmer.
Fixed error in 046.l

/* percent encode */
int fileno(FILE *);
#define p(x,y) {putchar(37);putchar(x);putchar(y);}
%option nounput noinput noyywrap
%%
\x20 p(50,48); /* space */
\x21 p(50,49); /* exclamation mark */
\x22 p(50,50); /* double quote */
\x23 p(50,51); /* pound sign */
\x24 p(50,52); /* dollar sign */
\x25 p(50,53); /* percent sign */
\x26 p(50,54); /* ampersand */
\x27 p(50,55); /* single quote */
\x28 p(50,56); /* opening parenthesis */
\x29 p(50,57); /* closing parenthesis */
\x2A p(50,42); /* asterisk */
\x2B p(50,43); /* plus sign */
\x2C p(50,44); /* comma */

\x2F p(50,47); /* forward slash */

\x3A p(51,65); /* colon */
\x3B p(51,66); /* semi-colon */
\x3C p(51,67); /* less than */
\x3D p(51,68); /* equals sign */
\x3E p(51,69); /* greater than */
\x3F p(51,70); /* question mark */
\x40 p(52,64); /* cuneiform */

\x5B p(53,91); /* opening bracket */
\x5C p(53,92); /* backslash */
\x5D p(53,93); /* closing bracket */
\x5E p(53,94); /* caret */

\x60 p(53,96); /* backquote */

\x7B p(53,123); /* opening brace */
\x7C p(53,124); /* vertical bar */
\x7D p(53,125); /* closing brace */
\15
%%
int main(){ yylex();exit(0);}
This thread reminds me of this meme: https://knowyourmeme.com/memes/buff-guys-help-out-nerdy-kid
Of course we try new things. The things you learn as a child get internalized very differently than the things you learn as an adult though.
Re: cloud stuff, sure I do less management of physical machines, but because I understand how stuff actually works, when I worked at an AWS shop, I was the go-to person for debugging and fixing problems with compute or network. And because I can write understandable code, I was able to move the infrastructure from point and click to repeatable terraform deploys that actually have a chance to fulfill the promise of cheap and scalable infrastructure (rather than rebuilding "every CPU is sacred" but in the cloud). Clear thinking, applying the power of "make the computer do it" and knowing how stuff works is always going to be super-useful, as everything turns into software.
In a few thousand years, programming will be a forgotten profession and only program archeologists will remain to scavenge code from the past into uses for the present. At least that’s what Verner Vinge wrote in one of his science fiction books.
I'm imagining the same for parents who don't control their kids. Someone has to vouch for them.
Literally no one is saying there can't or won't be downturns or hiccups - eg, two world wars definitely qualify as both. But even they couldn't stop the overwhelming, hundreds-year long global trend towards simultaneously increasing population AND prosperity. (which, btw, definitely did not have zero interest rates) But hey, don't take my word for it, see for yourself at eg https://ourworldindata.org/extreme-poverty
Safe Harbour provision does not exist in some of the jurisdictions Google operates.
just throwing this out there, all the Digital/DEC PDP stuff used octal notation, and that equipment was quite popular in universities and labs, so engineers would have been quite used to it in the 70's. But they equally could have been responding to the same constraints the Digital engineers did. Just as there wasn't as much memory back then, there weren't as many registers and they didn't have as many bits.

A more agile way to think of it in your head is not as "octal vs hex vs decimal", but bit patterns. For example, if you decompose a byte into subfields and use a subfield of 3 bits to refer to one of 8 registers, you're going to naturally use octal. chmod on the unix command line is still easiest to use in octal because of the 3 rwx bits for ugo. It's not octal, it's bits and how many do you have.
And it remains to be seen how well cross-organizational coordination in tech will fare across such disparate time zones.

And surely some of that funding would be going to local tech companies in those areas, and not simply branches of North American multinationals. All of these regions have their own businesses too, you know. Not everyone is raring to work remotely for Silicon Valley.
Don't really see low code replacing developers. You'll just see low code specialists like you do right like with CRMs and things like mulesoft.
You have the features of uMatrix with uBlock Origin's static rules. You just have to write them by hand instead of the convenient table UI.

https://news.ycombinator.com/item?id=26284124

The only thing that uBO doesn't support is controlling cookie access, so I still use uM for that.
I think you're wasting your time; cf. https://news.ycombinator.com/item?id=30408971
Your observation is perfectly compatible with the notion you quoted from the article.

It's just that the 95%-ile photography major or art major etc is not gonna make money from photography or art. Nobody buys the records of a 95%-ile musician either. (Though you can probably teach music at that skill level and earn a living.)

In comparison, a 95%-ile engineer can expect to make a decent living from engineering.

> I think this point of view is not only blatantly false but also much more dangerous than most people realize.

I partially agree about the notion being dangerous, despite probably being true.

The thing is that most people never put in the conscious effort required to get to 95%-ile proficiency. Despite any exhortations to the contrary.
So was it wrong for the Montgomery bus boycott to intentionally cause economic harm? Was it wrong for gandhi to break the salt monopoly, causing economic harm? It seems like either you’re applying different standards because you feel different about the causes - or you oppose the actions of some of the most celebrated icons of the past 100 years of social change - unless there’s a third position i’m missing
It does indeed. Dragnet surveillance is dumb and expensive.
Angular is simpler for me than React. I don truly understand the hate. I can built applications fasters in angular than React. I still use React sometimes, but I always go back to Angular.
Then I simply disagree with your framing of "everything that goes up must come down", which seems to ignore the existence of downturns and hiccups, and "tech workers will continue to be in increasingly high demand", which would be a much more questionable statement during such a downturn or hiccup. Such an economic slump would not be a pleasant time for anyone, even tech workers. It is good to be on guard against such an eventuality.

It’s also quite the fallacy to compare overall economic growth with one sector, or even one region. Ask how the Rust Belt has been doing these days in comparison to when Detroit was at its acme.
Recipes: finding a recipe that doesn't start with 1000 words on why this dish makes the author cry because it reminds them of their dearly departed Nana, followed by anecdotes about Nana.
Yes. Though I think the more interesting part of the article are when the author goes into the detailed mechanics of how that effort looks like for two examples.
It is not bad for the individual (one can become a decent programmer without playing around with programming in childhood), but it is bad for society and our education system in general. Programming early can add a lot of color and value to a child’s development.
Americans Will Need to Register to Travel to Europe in 2023
Frank Ostaseski's "The Five Initiations" might be of interest. It's not a how-to guide by any means, but illustrates what compassion can mean to people. Can be as simple as listening and accepting.
More code is being written every day than is being retired. With an ever-growing code base, comes the requirement for more resources to maintain it. Demand for developers is outpacing supply.
I've always thought x86-64 was a very weird "not quite 64-bit" extension of x86 that was done awkwardly, unlike the 16- to 32-bit transition. The fact that AMD designed it and not Intel may have been one of the reasons. Then again, "full 64-bit" wasn't really necessary (and even now, a lot of code is fine with 32-bit ints).
These are the kinds of companies that can't keep good talent.

Then then go to consulting companies and pay above market to get someone like me in when they need new systems built.
That's not true. If you are at a big tech company, working on a small feature, at least you'll know a lot of people will be affected or use what you do.

If you are at a startup, you are doing a lot, but there's a big chance no one will ever see it.

Bigger risk, bigger reward. Most people are driven by what makes them feel good, not just money.
Are there any ethical differences between the escapism offered by VR games vs movies or books? Hollywood has certainly done its share of crafting the current world we live in.
Note that I said “authentication and accounting system”. You just described a very small part of that functionality. It’s the reason people adopt large frameworks like Django, and why PHP’s session management alone is insufficient.

You can look at functionality like Apache’s mod_authnz_ldap as an example of built in account management that integrates with HTTP basic auth.

https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html
I believe it. That’s wonderful. Though I’m teaching now - in a previous life, I was a Local 600 2nd AC. The storytelling industry fascinates me, but I would love to see user generated, interactive fiction become prominent. All the better if talent can be the central stakeholder.

Unreal/Epic got a shout out above. Can you point out anyone else who is working seriously in the space?

That’s exciting.
Called it [1]. It's a cat-and-mouse game and, unfortunately, advertising is just _that_ lucrative. Privacy-minded browsing will help those that care (for now...), but that's an unsustainable option with the current monetization channels available.

If a content publisher cannot monetize you, they will think nothing of blocking you. There will be some public backlash against companies that do so and there will be some sites who will lose money because of it, but the rest of the publishers will simply follow the money while the industry shifts towards more intrusive tactics.

There needs to be a monetization channel that is 1) good for both users AND publishers and 2) pays just as much as current methods. Unfortunately none of the current systems support that.

[1] https://news.ycombinator.com/item?id=9975955
Correction: Automated moderation is basically impossible.

It's not like Apple can't afford to hire code review engineers.

Their products are supposed to be more expensive and better, not just more expensive.
How do you pay for Google Play gift cards (which you mentioned before Step 1) without creating a link to yourself?
I think the answer is closer to this, and also a lot scarier. There are vast swaths of the economy that have got to be over-leveraged and just weird from all these years of low-to-negative interest rates. We really don't know where things will be at until we have to turn up those rates, and the Fed is walking on a precarious tightrope. If interest rates go back to where they were in the 80s, it could be a bloodbath in the streets.

That is why rates may end up going slower (in the grand scheme of things) than we might expect. There is a plausible scenario of the entire economy being in the VC heat-death scenario in the 80s that older tech folks had previously been expecting, but has been pushed out hitherto because of the combination of easy returns and easy money.

Then of course there's how it will play out in tech. Historically, returns in tech have indeed been driven by VC capital, which is one of the more speculative areas of the economy. But speaking as someone working at a company that isn't a FANG, it seems that there's a chunk of tech that has become more like traditional finance in terms of its microeconomic structure. You have highly leveraged workers whose labor is being amplified by a combination of machines and capital, but the capital isn't so much speculative as it is boring and predictable.
Over $200M worth of NFTs have been stolen from OpenSea via phishing hack
> until just loading a single news article online meant waiting for a dozen ads and autoplaying videos to load.

That sounds like you not only didn’t block JS, you also didn’t block ads. Which is a very different argument. I only block 3rd-party JS by default (and that already requires a lot of whitelisting for almost every site that has any interaction) and I don’t have those issues because I also block ads.
One can learn a human language later in life, you just need to have a reason to do it. Kids are better at language acquisition because they have strong desire to communicate with people in their environment. There is no magical LAD that makes it easier for children, they are just extremely motivated.

Adults can be motivated also, but the situations for such motivations necessarily decrease as they are able to do what they want without learning new things. They aren’t less capable of learning, just less motivated to learn. That is easy enough to fix (extreme interest is a good motivator, for example).
Because when you configure your AWS like this, you get public buckets and so on. With private datacenters, Dev Ops can mean Dev can be responsible for their own stuff; with AWS, DevOps is there to keep dev from sending all the company data to the whole world.
onefetch: git repository summary on your terminal
So clueless. Have you ever worked at book store? Do you know what happens to unsold inventory? Why don't you look it up?

Just because you have a precious book or two you love so much and will cherish forever (well, until you die and your family throws them all away), it doesn't mean that particular book is special in any way. In order for your own copy to get into your grubby little hands, at least a dozen more were printed and destroyed.

Something like 77 million unsold books destroyed per year. The waste is mind boggling and in today's world, completely unnecessary.

Personally, I like my text on a screen and my trees in the ground as living plants, not landfill.
>there is independent media/press in germany, the article was not produced by any government entity.

Perhaps, but the public broadcasting channels (Öffentlich-rechtlicher Rundfunk) aren't part of this. You can predict their reporting and spin with good accuracy depending on which political party they're aligned with (SPD -> ARD, CDU -> ZDF, NDR -> Die Grünen).
Heh, yeah I was told that too but I figured the drugs were also reality, but from an interesting new perspective. :)
The title set off my crank meter, and sure enough:

> The vaccine mandates are a terrible human rights abuse worse than the Holocaust.

There it is!
I just skimmed the concluding paragraph to see what this is about but this is patently false: "I recall a conversation with a family member some months ago, when Omicron was a big thing in the media. My family member, a retired boomer and avid consumer of CNN and Fox News and MSNBC was entirely unaware that exposure to covid itself was bound to confer natural immunity with equal or better protective effects than any vaccine."

Yea, post-infection immunity can generate all kinds of results, some better than the vaccine and some worse. Up to a third do not generate usable antibodies post-infection. Most importantly, to gain this protection, you must survive infection which may win you a ticket to being disabled with Long COVID or a ferry ride across the river Styx.

Of course, at this point it should be pointed out that the vaccine gives good results against hospitalization, but if you want ~70% protection from infection from Omicron for 10 weeks (declines after that, probably not to zero though), you need to be boosted.
I really don't know much about this space, but do you think server-side tagging could be more or less susceptible to user resistance attacks like what Adnausium[0] does? Can we spam them into futility?

[0] https://adnauseam.io/
Archived: https://archive.fo/7IDPx
I'm curious why you even left this post - you know you won't change anything. You know nobody will agree with you.

What's left?
Heritage Auction, they have another lot coming up soon: https://comics.ha.com/c/auction-home.zx?saleNo=7265&ic=bread...
If you think that's bad, you clearly haven't seen Amazon's ads about using Alexa to perform sexual harassment
All that random crap will still run in your browser though.

The important thing here is that Google are asking users to proxy scripts from a Google server via a subdomain of their site. That's relatively trivial to do as far as the code and config goes, and not costly for the user or for Google. The advantage to the site and Google is that those scripts now look like first party files; Google are using a first part subdomain to subvert the Same Origin Policy via a proxy.

Every other tracking and ad service will set up the same thing. The reason it hasn't happened in the past is because it was hard to configure. Google are giving every other service the gift of explaining how to do it to users. Going to a website that had 50 tracking bugs from 50 domains will now have 50 tracking bugs from 50 Same Origin Policy allowed subdomains, all unique to that site, and all different so blockers will have a much harder time working out what to block.

The code that runs in the browser doesn't change. The only difference is where it appears to originate from.
People always look at me funny for recommending it but How To Talk so Kids Will Listen and Listen so Kids Will Talk can be a big help for dealing with adults too. The main difference between a child and a grown-up in terms of how you talk to them is that the grown-up has a larger vocabulary, so you need to resort to tricks like "draw me how you feel" less often.

Although written with another purpose in mind, Never Split the Difference also emphasises over and over how to acknowledge what people are feeling without adding judgment.
Google’s recommending that people set a A record in their own domain for the server, and change the name of the script. Given this, documenting such proxies and URLs and maintaining that documentation doesn’t seem practical.

On the other hand, I wonder if you could just block all IP addresses associated with google, or those associated with their cloud/app engine? I suppose that could be handled at the firewall maybe? Are there ASNs google uses specifically for their app engine and cloud computing resources? Others have mentioned that a lot of government agencies rely on google app engine, but it’d be nice to kill all traffic to/from anything google.
If I remember correctly, an ISP can push a new firmware to a Docsis3 modem at any time too and force reboot it.

Bothers me none of my modems have ever had the option to turn off WAN-side flashing, never know who is going to figure out how to take advantage of that.
The other thing that gets missed is people who start young are so interested in computing they have lots of adjacent knowledge.
And how do you differentiate between a request that is sending over tracking data and a request that is sending over data required to fetch the page you requested?
The Quest 2 is cheaper than the cheapest iPhone or the latest generation of game consoles, so probably quite a few people (if they had the inclination)
More like the street in front of your house including people in their cars
Bingo. Gf3 is a good movie, the problem is Gf1 and Gf2 are to put it simply, masterpieces. Short of a masterpiece, there was no way for Gf3 to compete.

For what it is worth, the recent remaster of Gf3, Gf3: Coda improves the storytelling of Gf3 significantly and I would say makes the movie considerably better, but it is still not competitive with Gf1 and Gf2. That said, I really recommend everyone watch the Coda remaster at this point and do it with an open mind.
> Poke around Reddit or even HN and this work minimization mindset is even celebrated by a lot of people. If you’ve been surrounded by high achievers and motivated people who would have chosen programming jobs because that’s what they like to do every day, it can be a shock to work with people who really just hate doing anything that resembles work. Yet they’re out there, in surprisingly large numbers.

You say this like its a bad thing?

Even still, wanting to work less but taking pride in your work aren't mutually exclusive ideas. Id prefer to work as little as possible, I always do the best I can though and take care to be thoughtful and do things right. Im just not going to bend over backwards for a corporation.