skysight-inc/HackerNews huggingface dataset:
In the US, our campaign finance is heavily corrupt. There is no public finance system so candidates beg for money anywhere they can. Our 2020 elections spent nearly 15 billion dollars between our president and our congress. Some of that money comes from candidates directly asking for money. Other times, supposedly independent organizations (superpac) working to further the cause of a candidate, but not directly working with them, will also try to fundraise and campaign on their behalf without direct coordination. There is no limit to the amount of money such an org can get or spend, because the conservative Supremes ruled it an expression of free speech. Other conservatives worked to mask the sources of funding for such organizations.

Political activity was specifically excluded from our already sad and almost never enforced spam laws. Further, individual campaign donations are considered a matter of public record. So individual donors get recorded in these databases, and then private companies like NGP will harvest those databases, cross reference / deduplicate people with other databases, figure out their email and text contacts and then sell that information to candidates and parties who will in turn use it to spam you nonstop across email and SMS for every subsequent or similar election.

Good times.
> To this day I'm still mystified as to why this bug hadn't caused broken interrupts (+ mysterious behavior) or mass panics before then. There must've been some other change to xnu that exposed the bug somehow, but I'll probably never know.

My favourite species of software bugs are the ones that when you find the source you realise the code is fundamentally broken, and you get to investigate how the hell it worked for so long!
Nothing will change for Mint.

They are committed to continue distributing Firefox as a .deb package, following upstream as closely as possible.

https://blog.linuxmint.com/?p=4244
I think the loop term is OK, it's just gated by the event sensitivity list for each iteration. If you have an always without a sensitivity list then it is a while(1) equivalent.
I used to be on an IRC server that ran a honeypot to then find actual compromised servers and check them out - IIRC there were Ecuadorean government servers, and a load of routers in India, etc.

Most of it was just malware analysis and people creating pubstro servers for fun with different communities.

Not everything is Reds under the bed.
I read that Israel did a good job documenting everything that happened. I bet you could do a reverse lookup from that number tattooed on them.
Being able to leave a job at any time (due to savings) is a huge comfort.

This is anecdote, but the higher salary companies I've worked at have been much more competent, productive and happier in general.

Most of the stress I've encountered in software development has been due to complexity brought by inexperience. They were all lower paying companies.
I never thought this would become relevant in a context like this, but here it is, and it is painfully relevant: https://www.youtube.com/watch?v=uMSV4OteqBE
This kind of thing is always shocking to sheltered middle class people in their bubble. You start to think everyone lives like you.
When means when big companies free labs exists, ruled by technicians not managers, without time-to-market pressure, with public funds.

https://blog.dshr.org/2020/05/the-death-of-corporate-researc...
https://archive.vn/CKdqr

That's the "when"... To reproduce it we need similar conditions, the opposite of actual neoliberal agenda...
Also whether you're wearing your blue light defense moisturizer (context - https://www.eurogamer.net/articles/2021-10-20-streamer-valky...)
Ah yes, the US situation is a bummer.

I know it runs on some phones but you'd really have to check and/or ask on the forums: https://forum.sailfishos.org/

Maybe this thread is helpful: https://forum.sailfishos.org/t/sailfish-in-the-usa/5307
I think we can both agree investors are powerful. In the case of Buzzfeed and HP and so on the investors may be more powerful than management.

But I'm saying that no matter what, management is responsible for actions they take.
Microsoft is a criminal organization targeting users.
Don’t be silly. A man who decides they want to be a woman is a human being who should absolutely be sympathized with and treated kindly, but simply isn’t a woman. That’s such an obviously reasonable opinion (even if you disagree with it) that there’s no need to tie yourself up in knots worrying about the difference between “pointing out” and “starting a conversation”. Yes, I mean “right” in an informal or moral sense, not legal.
no offense intended but this sounds largely like luck based on my personal experience with cloud providers.
Next up: Ukrainian soldier 1st person Twitch channel
I guess Al-Khwarizmi comes from the near East and from 9th century or thereabouts, so there are no local stores for them to try out, but online shopping works perfect since they deliver to all places and to all times.

Being similarly tall with longish legs (especially my thigh bone, important for eg. legroom in cars, airplanes...), I'd be extremely weary of jumping on a bike that's not suitably sized, no matter what claims people make how a smaller bike can fit you.

But what matters just the same is your arm length, body length and such: basically, how far down and in the front you can reach when properly seated above the pedals? I've only got "average" arms (my wingspan matches my height), so smaller frames mean hard to reach handlebars.

When you can't easily try a bike out, if it's not rated for at least 2-3" (5-8cm) taller riders than you are, I wouldn't get it because your balance and posture will suffer.
One trick is to internally sing the comments that you suspect might give you that reaction.
Can't access the site. I get this error:

Secure Connection Failed

An error occurred during a connection to www.simonweckert.com. Peer’s certificate has an invalid signature.

Error code: SEC_ERROR_BAD_SIGNATURE

- The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

- Please contact the website owners to inform them of this problem.
The manager of Blue Origin’s rocket engine program has left the company
Whenever someone says "free market" i always have to think of situations like Enron, Theranos or child labor. People can not be trusted to behave decently in a free market. In theory free market sounds nice, in practice it will only show you how much people value money over other people...
The Wii had 4 major versions over the lifetime of the product, and the Wii U had 5. So I think 32 is pretty generous.
An interactive, 11-diagram walkthrough of a real-life serverless architecture
Is your workplace Okta? They built a custom internal tool. Until they enumerate exactly what the attacker had access to it’s hard to infer anything.
It's, at best, speculation, and would probably get the authors sued for libel if the person being speculated about wasn't dead. Now, obviously dead people can't (in most jurisdictions) sue for defamation, and that's probably sensible law, but it's fairly distasteful speculation and it's not surprising that the publisher would pull it, particularly after it was debunked.
There's a flaw. In the Netherlands everything is in English. In fact I spoke English with my Dutch classmates.
That's why there are so many international students.
Infamously if you want to study Dutch literature you have to read them in English.

It doesn't work that way in Germany.
I’m using this as a daily driver.

It’s usable and the security benefits are definitely important when working with multiple security domains (separate clients each with their own confidential data and third-party dependencies, where you don’t want one client’s malicious NPM dependency affecting the other).

However, there are cons. It’s only really usable in a stationary environment; it completely kills battery life and even basic tasks such as (non-HD) video display maxes out a single CPU core so it’s just not worth trying on a laptop. Hibernation doesn’t seem to be supported by default which becomes risky when combined with the extreme power usage.
It is to operating systems what automatic memory management was to programming. Irrefutably needed.
That's interestingly specific...
Lenovo ThinkPad T or X series perhaps?
"a bit of censorship resistance"

tell that to the russians right now, or to all the other 3. world countrys whose only hope for usable currency is bitcoin
This isn't laziness. This is different priorities. Few people think that decentralized systems are an important thing in and of themselves. Laziness would be believing the decentralization is good without working to achieve it.
There's an XKCD that captures that: https://xkcd.com/927/
Note that this specific bug seem to happen only after cache operations (i.e. something like CLFLUSH, CLZERO in x86 parlance). It is possible that these instructions on the Switch SoC require a different barrier either because of spec details or hardware bugs.
News/general interest about this craft seemed to have dropped off after the first couple of weeks. I'm glad it's still going, and happy to hear that.
The "hypothesis" it's about us reading, not them writing.

We don't notice how little we know on topics we don't fully grasp, but when we notice them in topics we are more experienced about we don't do anything, we just change topic.
No offense taken. :-) It's just our own observation and not backed by any study or such.

Could also be because we're lucky hosting in the Frankfurt data center. I think the popular us east one has more issues generally.
It would be great to define propaganda. Because then we would realize that there is a lot of propaganda everywhere.
Most likely correlation not causation. Amateur radio operators use a wide range of equipment and frequencies, so without know all factors such research means nothing. Many hobbyists solder the own electronics or have jobs in engineering, so there could be any number of other factors at play.
It's not at all clear to me why an investigation into the identity of the betrayer "tarnished Anne Frank's memory and the dignity of Holocaust survivors". This looks to me like the worst kind of gatekeeping: gentiles aren't allowed to do research on Jewish heroes.

Perhaps the BBC article is just really badly written.
> nothing should be ever free from questioning

Nothing should be free of questioning, but I don't think a major publisher has much interest in publishing a book whose research has been discredited. That's just basic common sense—just like (most) people don't go around repeating things that they know to be false. Except for things like Santa Claus, I guess.
> I admit I wasn’t aware open-source was such a strict term. I always used it where the source code was available.

The term you want is “source-available”:

https://en.wikipedia.org/wiki/Source-available_software
I ran into weird issues with pop. I don’t think it’s a pop issue. I forget the exact issue but I was trying to install a couple of applications and I couldn’t because it said it was only for Ubuntu. I ended up hacking some file changing the name of the OS from Pop to Ubuntu and it installed and worked fine.

Honestly after that I never tried it again.

Currently running manjaro but really wanna give fedora a try cos seems people who use it swear by it.
Our beta users hacked our APIs for something we didn't even know we could do
Hey all, I'm Dhruv and also the Co-Founder at EZiD (https://www.ezid.io/). We actually started this because all of us hated passwords and built our APIs thinking that users would only use it for simple passwordless sign up and login and we even got a few beta users who switched from Auth0 or their own custom auth methods to try us out because they believed our APIs were a lot more flexible.

Little did we know that our beta users were also using our APIs for other reasons such as outbound email marketing where they would embed a users email into the CTA and just like the sign-up process bypass the auth wall so they could claim any discount or promotion that was being sent to them.

This made us think how auth should actually be reimagined. Instead of it just being at the start, we should start thinking what kinda auth, when, and where in the user journey it should be used.

Here are the docs incase anyone wants to play around with it! We're still in closed beta but happy to onboard a few more users if anyone is keen to join us

https://foremost-cotija-b6e.notion.site/Docs-94f0a168c0914a61ab5339c32750577e

Our beta users have seen a user conversion go up by 175% and we are close to 1200 MAU!

Also, we know our website doesn't look the best and this is because we put all our effort into making sure our APIs robust and bringing on early beta users to test our product
TIL about this - I've had a few minutes of fun already ha!
Just one person but i was an early case (family member went to Wuhan 1-2 times each month. During the firsr year of COVID, as early as march of 2020, i had serious issues with gut and hearth inflamation - repeated bouts that started as back pain, became chest pain, elevated heart-rate to 150 for ~3 days at a time, 24 hours a day. Gradyally the episodes became less frequent leading up to a stroke type event co current with a presumed second bout of covid. Was forced back to work about a week after the issue, and the only other coworker who was near me contracted covid about 10 days later.

Following the Stroke type event I lost virtually all of my talent at writing, And ultimately my job, which was very humbling. Ive spent the past year working gig jobs when i can, and fortunately all long covid symptoms have gone away. I feel like my brain is close to 100% but i lack the confidence in myself, my memory, and my writing and am constantly second guessing myself and assume im wrong if in a contested discussion.
It really sucks, yet im probably one of the lucky ones
> FWIW: I re-read this a bunch of times, and I don't understand how this isn't a hardware bug. How can an asynchronous interrupt be specified in any rigorous way if it does NOT act as a memory barrier to the interrupted code? Clearly the CPU isn't going to cache its in-flight state for every interrupt (and remember interrupts can be themselves interrupted!). So certainly "most" of its state is being serialized. And we're supposed to magically guess on a per-IP basis which state isn't? Yikes.

Memory barriers only concern interactions with other agents that access memory.

Any given thread of execution is always consistent with respect to itself, including when taking interrupts.

"Serialized" is also not the same as a barrier and is not really related to memory consistency. Serialization does only matter within a single thread of execution.
Precisely, if 1 exploit downgrade block every 6 months for 16 years isn't effective enough then there is no number of fuses that are effective enough.
I wouldn't be surprised if they do get a prize, but I can't help but wonder how much editorial oversight is had here.

Are AP editors just lapping up whatever these guys pump out or are they using discernment?

Often times the only evidence we have of things happening are from these guys, their photos are high quality but I would appreciate seeing some other sources even if they were of lower quality.
The same article has been posted on Twitter multiple times by Caravan. Probably the most worrying statements made in the article are
1 - that phone contacts are automatically uploaded as soon as you install the app
2 - Truecaller is reading your messages, esp financial details and then building a profile
3 - EU users get privacy controls because of GDPR while India users don't.

But the company has also posted their own response to the article on twitter
(https://truecaller.blog/2022/03/10/truecaller-statement-3/) stating that none of these things are true. In such a case, who does one believe? The statement says that Truecaller responses have deliberately not been included in the article.
I've been using Qubes for over five years now as my work/coding machine. A couple notes if anyone is curious.

As for performance it is pretty good for what it is. My laptop is too old to do much of anything serious anyways, 2011 x220, but with 16gb RAM I don't really have issues with day-to-day use. I can't play full screen youtube which in other Linux OSes will work so there is something about that pipeline that isn't as performant.

My usual use is running emacs and SBCL, no issues there. I give my work VM around 8gb of RAM and that is more than enough.

One nice thing I have done repeatedly, I have written up a server in my work vm, then cloned the vm with all my code in /home, then reduced the ram on the clone to just enough to run some code as a server, and tested it. Once the code is nice and I would then spin up a fresh VM from the same template but without any of the /home files to run it from, copy the right folder over, and run it for a while in long term sort of testing.

As someone who runs VMs randomly for various reasons it is nice to have them integrated into the machine. Before this I was using a Linux box with KVMs and working from within a VM anyways. Having all the VMs update with only a couple clicks is very convinient, as is making backups of them. Having them all display windows within one desktop enviornment is fantastic for such a small screen.

Only annoyance is having a couple extra clicks to pull the clipboard from one VM to another but I got used to it and it doesn't bother me anymore.
What's there to explain? Tell people that it isn't perfect, and they seem to know this already.

Propose to share a proportional number of correctly predicted examples for every incorrect example they come up with? (Okay, don't actually do this)

Who is criticising your work? Manager/colleague/stakeholder/C-level executive? Does it matter if they are criticising it? What happens if you just shrug and keep doing what you're doing?

The whole thing seems like a communication/political problem, not a technical one, and it's hard to give advice when we don't know the specifics.
x86 Darwin had a bug where AVX512 K (opmask) registers would not be saved and restored on context switches when YMM registers had all 0 values. The kernel assumed that AVX512 wasn't used. They fixed it in Monterey 12.2, but still hasn't backported. Heisenbug for sure.

Ref: https://github.com/golang/go/issues/49233#issuecomment-96373...
There are companies that already provide this kind of service so it might be interesting for you to combine efforts:

https://www.youtube.com/watch?v=e0elNU0iOMY
People have been speculating about who murdered the Princes In The Tower for hundreds of years. Why isn't that considered "distasteful"? What's so wrong with trying to throw new light on old mysteries? Isn't that why there are historians?
my approach to technical terms is that life is much simpler if you entirely forget their real-world usage and just map them strictly to how they are defined in the technical context... they could be called zroglub and blox that I couldn't care less, and honestly sometimes I feel that it would be much less confusing to do things that way rather than trying to tie things to some common dictionary word
No, definitely not full admin access. Just a support tool called “SuperUser”.

It was a customer service rep who could send password reset emails.

Systems listed were that app and SaaS offerings. The laptop was vendor owned and managed.

Given my experience, it probably had 0 access to anything “inside” Okta. There was no mention of vendor VPN or Virtual Desktop access. Or access to any internal system beyond what was a horribly named call center support tool.

They really wouldn’t have passed the necessary audits for their enterprise and government customer base if they allowed 3rd party devices “real” access.

Beyond a “hacker” getting access, there is very little trust in (likely) contract employees of a contract company.

The fact that the tool is named Super User is killing them more than anything here.
I believe the whole community is an ad for YCombinator ;)
It was submitted by mrintellectual.
Indeed the battery life is shorter than with normal Linux, but it's fine with me. Concerning the hibernation, see this: https://github.com/QubesOS/qubes-issues/issues/2414.
The cability provides for a lot more than blocking software downgrades e.g. setting the boot signing key and then locking it with an efuse so only matching signed images can be booted or the inverse, enable unsigned custom firmware but blow a fuse to mark the device has been allowed to run custom software (which may impact hardware DRM systems during boot).
For a proper judgment of the riding characteristics a look at the practical use when riding downhill could be helpful:

https://www.kwigglebike.com/en_US/faltrad-vs-rennrad-am-berg

This ride felt absolutey safe.
I've used Fedora as my daily driver for over a decade. I rarely have issues and the past few years have been particularly stable. It just works.
"Amazon Corretto is a no-cost, multiplatform, production-ready distribution of the Open Java Development Kit (OpenJDK)."

I'm not sure how I never heard about this before now. Is anyone out there using this over other JDKs?
SV and VHDL are nasty languages, but as you said, they are "industry standard". Chisel and Haskell-based approaches are better but virtually nobody adopts them.

I tried to go in another direction, to make design code shorter by using Clojure syntax. The result is here: https://github.com/m1kal/charbel and works for simple modules. I don't expect wide adoption, but we need to look for new directions instead of sticking to the methods and languages from the 80s.
Question: Why the trolley? Was it an afterthought, or was it not possible to make the bike wheel(s) perform that function when folded?
Yes .. for me, it sounds expensive. A macbook is a rocket ship in terms of complexity vs. a bicycle. If copyright/patents went away, how cheap do you think you can produce a macbook? a folding bike?

This line of thinking is why everything was stupid expensive in the bay area (mattresses, bicycles, etc.) In Canada, I never paid more than 300 for a bicycle or more than 500 for a mattress. As OP said, I don't care if it is made in London, the price needs to be accessible to the masses for these things to solve our transport crisis.
typo in your link https://hn.algolia.com/
The Stress of College Admissions Is Largely Unnecessary
That isn't true. Most public figures never have something like this in their past. Nor would you have ever forgiven an MSM publication for shouting that Russia would never invade on their front page for months. The NY Times is still living down Judith Miller after 20 years and she's been cancelled from journalism for what Taibbi has done.
Indeed - and they provide separation between a stable OS (which debs are fine for) and frequent desktop app updates. I've been using Snap, Flatpak and Appimage for desktop/productivity apps (Krita, DigiKam, Spotify, Signal, calibre etc) where possible. Its been amazing getting updates in a timely fashion, sometimes straight from the developer, instead of having to wait years for the DEBs to be updated.