skysight-inc/HackerNews huggingface dataset:
> Sorry, but I would still use gas.

Of course, but this is very privileged stance, and you're not the target customer base either. The overall cost of those three batteries is significantly lesser than gas so as to merit their choice for batteries.
"Trust on the existing, tested, proven OSS solutions and libraries available, if you decide to not rely on a provider like Okta. "

Can you recommend some?
TeX (and Metafont, and the original Tangle and Weave) were written in Pascal, which is much more rigid with respect to ordering than early C was. The CWEB used for the Stanford Graphbase came later. (Silvio Levy did the initial adaptation of Pascal WEB to C, and Knuth took it over when he switched to programming in C.)
Azure B2C is a direct competitor to Okta... If MS isnt dogfooding this, when what would they dogfood?
Related, see https://gerda.tech/ which is a KaiOS fork (and therefore in the FirefoxOS family)

I wonder if Capyloon can run FirefoxOS apps like Kai can.
Isolating the network does increase the security while reducing the attack surface. But without good usable internet access, it's harder to be productive as an employee. Therefore efficiency of the workforce will be lowered.

Depending on your company size, there are ways to achieve relatively high security. However, no system is secure enough and everything can be hacked at some point if there is enough interest in it.
Excellent article. Faceted visualisation is an incredibly powerful technique.

Something the author hints at but isn't quite explicit: manual inspection of individual examples from your dataset can help you understand what questions to ask, what category to facet on, or the bug in your aggregation.
I'd also say that a lot of the reason for refactoring is just... different. Literate programs are typically made to be fairly self contained works. If you have some general purpose code that is of use in the entire codebase, you can make that its own section and cover it when it is needed. Otherwise, you likely won't reach for the same coding strategies that are common outside of literate code.

I'm trying to find a way to describe this a bit better than the above. I think the easiest way to think about it, is that in most software projects you have a separate document that is the general architecture of the software. It is rare that you will need or want to refactor the architecture, so you try to keep that somewhat faithful to what the code is doing. In literate software, that high level architecture view is part of how you organize the code.
The screenshots on the linked tweet make it look like okta dog foods their own product for access to various services and someone has access to one of their admin accounts. Which is bad, but that could mean “we phished this one person who works at okta” and not “we compromised okta and have unfettered access to their customers/valuable assets”.

The news of the coming days may well prove me wrong, but i am not assuming the worst from this yet. Many companies whether or not they use an idaas do things like login anomalie detecting, and users coming in from weird locations and weird times of day would be sure to set of alarm bells at some of the big targets. Heck, AWS does it for customers with guard duty.
Why would I ever need to support arbitrary Oauth2 providers? As long as they're following the standards, a generic Oauth2 client should suffice. If they're misaligned with the standards I wouldn't be using their service.
Speaking out against Agile and Scrum
What else do you expect them to say? Put yourself in their shoes for a moment.

It’s perfectly okay to not say anything prematurely that can cause any confusion; with the employees, customers, and media.

All eyes are on them; it’s better not to screw up whatever little trust they have left.
That seems like an attack vector unrelated to the Okta breach -- if it was possible to attack the MS employee's computer from a compromised app, then whether or not that app was protected by Okta seems immaterial.
The problem with self documenting code is that it doesn't help justify all of the parts into the whole. This is particularly troublesome in code where a refactor effectively isolated entire sections of the code, but the person that did the refactor didn't realize it, and now you have code that exists only for the sake of existing tests.
"As cells read out the information stored in DNA, they do rigorous proofreading and error correction, to nip potential errors in the bud."

But cells also accumulate more and more changes in their DNA over time. The system of cells, that is a body, works until it inevitably breaks down. It is only through many trails and errors that it might be able to vaguely replicate something of itself.

What does it require to implement something like this? And do we really want to? A pocket calculator that is permanently miscalculating?
Yep, after memory safety there's still work to be done. But it'll be a lot less work.
I'm not sure that "security engineer" would be an accurate term to describe such a person.
Yes. Keycloak, for one: https://www.keycloak.org

I've also heard good things about Hydra: https://www.ory.sh/hydra/

Depending on your needs, an SSO proxy like Vouch works well for internal services: https://github.com/vouch/vouch-proxy

There's also an abundance of libraries for different programming languages to implement authentication or authorisation, lots of them battle-tested by thousands of services. It's not like providing secure services is impossible without Okta.
> It might be worthwhile to GPL implementations of those expired patents if they are at all likely to be useful.

Probably not. It's always something stupid that can be easily worked around.

The real problem is convincing a jury: no one wants to risk hundreds of millions of dollars based on what 12 random people think. nVidia caved to Intel after building a Transmeta style VLIW chip that could run x86 assembly because a decade long patent battle would have been costly and invalidated patents on both sides.
While definitions can be fuzzy, in Russian doctrine a "tactical nuke" would refer to something you fire "in battle", from artillery range, and does not carry enough payload to level a city.

It also makes sense on the abstract level. Leveling a city is not a tactic, it is a strategy-level move.
...and also his first Oscar.

I've read a couple things over the years that the win for The Departed is a sort of make-up from the Academy for Scorsese losing Best Director for Raging Bull in '81 to Robert Redford (for "Ordinary People", who remembers that?) and for Goodfellas in '91 to Kevin Costner (for "Dances with Wolves", who WANTS to remember that?)
Electric motorcycles have this problem, too. Last year a popular German motorcycle magazine ("Motorrad") tested electric motorcycles in their big mountain test where they bring almost all available motorcycle models from that year to the alps.

The loudest motorcycle driven at normal speeds was an electric one.

I really hope they can bring that noise down further.
Honestly don't know: can you post-process raw DSLR images on a computer to acheive the same quality as iPhone camera?
I recommend personal productivity books, especially Getting Things Done by David Allen. Everyone in the department needs to read and follow the principles, which can be very hard to sell when you are not the boss yourself. The worst thing is being in meetings where people agree to pieces of work, then a week later at the next meeting, nobody has done anything, they all have excuses but the real reason is they didn't write it down, didn't take responsibility to understand what the whole team and project needs from them, and they don't get any pressure from management to do a better job than that. I eventually gave up trying to "fix other people," and instead just implemented my own system so at least I could be 100% responsible for doing my own tasks and project pieces that I agree to do. You can set a good example - but it's rare that anyone will follow your example without pressure from above. You'll even get kudos from the people who can't do it; then after that - they make no progress themselves personally. The gears don't engage. Honestly it's very frustrating. Every job I've had over the past 35 years except one were dysfunctional organizationally, and nothing I did as an individual contributor had much impact.
Why is website design so awful today generally?
As I wrote in a sibling comment:

Keycloak, for one: https://www.keycloak.org

I've also heard good things about Hydra: https://www.ory.sh/hydra/

Depending on your needs, an SSO proxy like Vouch works well for internal services: https://github.com/vouch/vouch-proxy

There's also an abundance of libraries for different programming languages to implement authentication or authorisation, lots of them battle-tested by thousands of services. It's not like providing secure services is impossible without Okta.
I think the way to think of ASIDs is as each being a separate address space - in effect if you have 15 bits of ASID you have 2^15 - 32k address spaces.

One thing I've done in VRoom! which is an extension on to the RISCV spec is that if we have an N hart SMP CPU (for example a 2 cpu SMT system) we use log2(N) bits of the ASID to select which hart/cpu a TLB entry belongs to - from a programmer's point of view the ASID just looks smaller.

However there's a VRoom! specific config bit (by default off) that you can set if you know that the ASIDs you are going to use for all your CPU's effectively see the same address space - if you set that bit then the per-cpu portion of the ASID tags (in the TLB) become available (ie to the programmer the ASID looks bigger) - it's a great hack because it doesn't get into any critical paths anywhere
It's a bold claim to say that "anything else is misuse". To prove a claim like that you would have to show how every possible use of !important is "misuse", except when it is for font-size problems. Now maybe it is possible to show that every conceivable other use is misuse, but until we see such a proof we shouldn't just take for granted just because somebody makes such a claim.

A better claim would be "I don't see any good reason to use it". Just because one person doesn't see any good reason to use it doesn't mean there isn't one, or two, or three, or more.

It is always very hard to prove a negative ("There isn't any such that ...")
The pattern you're looking for is "when I have an asset in the White House, I don't need to waste huge amounts of resources and global credibility on a stupid and brute military campaign, I can just use the asset."

Also perhaps "when I have an asset in the White House, I should not undermine his local image with a power struggle".
With the Feed as my witness
Which is actually much better than a distributed monolith (random microservices thrown together just because it ticks some boxes on managements resumes)
Bill Demirkapi posted an update later that this earlier assumption was perhaps incorrect [0]. It seems an internet-routable RDP server at rdp.chrisro.fun ("chrisro" is apparently named after the specific Okta employee/contractor whose name is visible in screenshots) is a more likely vector for compromise.

0: https://twitter.com/BillDemirkapi/status/1506123471352438784
- The batteries discussed here are small and comparatively light weight (a person can remove). So consider it more as "Cells". If you want more range, replace more cells or have heavier pack. If you need the range of Tesla, then you need more battery packs in the vehicle (And increases the weight of the vehicle and its cost).

- Also the vehicles mentioned here (Auto rickshaw) generally carry max 3 customers for shorter distances. Majority of the travel will be in the range of less than 10 Kms.

So for less cost, she is able to serve the same customers, increasing her earning.
Did Americans Call French Fries “Freedom Fries”?
> Microservices: Why Are We Doing This?

1. Because many developers have no idea that it is possible to produce a “local modular application”.

2. Plumbing, technologies and deployment pipelines have become more important than a business problem domain.
A vaccine mandate admits the possibility of following the law that effective in different jurisdictions, exceptions as required by law, court challenges and so forth. A vaccine that spread like a disease may be introduced in one nation and pass trivially behind national boundaries subject to no law of man.

Insofar as legal mandates we've been mandating that school children be vaccinated for various things for a very long time. I don't see any problem with not allowing a single person to opt to subject the entire rest of society to sickness and death. That seems like a morally dubious sort of freedom.
You're type of reply is common with people who assume the free market is real and that the rules prohibit interference.

Neither has ever been true. Its just a theoretical ideal some people in government argue in favor off.

Food subsidies are bailouts under the guise of "social good", in some places they prevent people from starving.
Some linguistic context: gombóc means "dumpling" in Hungarian, and gömböc itself is a less commonly used name for head cheese (https://en.wikipedia.org/wiki/Head_cheese), which is traditionally filled into the pig's stomach and therefore also has a round-ish shape.
>Code should be written for humans not machines.

Unfortunately, machines have a different way of understanding code than humans.
Attorney Client Privilege is abused significantly at tech companies. Remember that the privilege is for a very narrow allowance of cases where the communication is directly between the client and the lawyer with the client requesting legal advice.

Marking an entire group chat with 3000 people [A/C priv] does NOT make all content in the group magically invisible to subpeona.
> There's no need to start writing user login code tonight.

I think it's worth pointing out that replacing Okta for most people isn't just doing login +MFA stuff.

Sure, there's that part of it - but a lot of the value in going with Okta in particular is that so many third parties support integrating with them in ways that other Identity providers are just not supported.

Account lifecycle stuff (via SCIM) is often limited to just Okta support for products.

There's also the account lifecycle stuff so that HR doesn't have to tell you when they hire someone, they just add them into the HR system and all the things flow out from that. Similarly when someone leaves, you can have those workflows go and disable/delete their accounts.
why do the hackers disclose the hack though? why not keep it silent and abuse more

seems pretty easy to hack a SaaS anyway. just need to phish an engineering employee account. often they have superuser access to debug customer issues
I saw this, but where is the actual statement?

> Authentication services company Okta Inc said on Tuesday

Where? What did they say? To who? The person writing the article?
So you're suggesting that for a sovereign power to consider joining NATO is "flirting irresponsibly". Can I assume that you think it irresponsible because Ukraine borders Russia? If so, that ship sailed years ago. Lithuania, Latvia and Estonia are all NATO members (that happened under Putin's first stretch as president).

If Russia wanted to maintain a NATO-free buffer around its borders, what lesson do you think attacking the country that isn't a NATO member sends to the others? Surely it's "let's join NATO before Putin sends in the tanks". I'll believe otherwise when Putin attacks Lithuania, Latvia or Estonia. I won't hold my breath.
The article claims that even the CEO of Google did this when sending an email to the CEO of YouTube. These are people who should know better, and if true, then it’s not exactly the innocuous case of the inexperienced individual accidentally marking a communication as attorney-client privileged.
You will be shocked to know that emacs and org-mode can do exactly this. You can tangle source, and go from the tangled source back to the section that generated that source.

If you are wanting to just do cweb, then the debugging symbols already let you step through the source line by line without having to look at the tangled source.
Azure B2C is awful though
Telegram is unbanned in Brazil after agreeing to censor
Yes it is and parents post shows exactly why uneducated folks shouldn't be given a direct vote in pretty much any aspect of public health beyond voting for the folks in charge and those folks hiring actual subject matter experts to make such decisions.
Using pgTAP to automate database testing
This is not how FedRAMP works, re: “interacting with top secret”…

No secret or top secret info is permitted in the typical Impact Level 4 and Impact Level 5 FedRAMP systems. Okta is only certified at IL4 I think.

AWS & Azure do offer IL6, meaning information processed up to the SECRET classification.
Would Cloudflare be a better auth provider? https://twitter.com/eastdakota/status/1506148082194386949
We are starting to copy it elsewhere, it's going good in the same direction in baby steps.
If you can find a way to fix other properties without using !important, then for sure you can find a way to fix text size without using !important.

So the argument doesn't quite work.
No, this has aged well. If anything western narratives have changed to paint him as a hero. Putin is a megalomaniac corrupt dictator. There is no point fighting him. Zelensky could concede the four points and end the war but he chose to force all men to fight for him.

Either he is power hungry or US is forcing him to cling on to his title. Today he suspended all left and socialist parties including the party that got the second highest votes
https://www.aljazeera.com/opinions/2022/3/21/why-did-ukraine...

Also keep in mind that Medvedchuk got more votes than him but Zelensky had him arrested.

Same feces as Russia just a different orifice.

BBC article in 2014 on rise of neo-nazism in Ukraine https://www.youtube.com/watch?v=5SBo0akeDMY

Human Rights Watch on Ukraine killing civilians https://www.hrw.org/news/2014/07/24/ukraine-unguided-rockets...
Maybe the battery gets better after a few recharges?

In the case if my fairly new laptop battery they said it "adjusts" and gets better after a while. I'm not sure if it's true and how much better it actually gets.

https://forums.digitalspy.com/discussion/2128704/do-new-batt...
So roughly how long did it take? I participated in table exercises of that sort and couldn’t convincingly get less than two weeks. And not two fun weeks.
Isn't the point of the RISC-V extension mechanism is to eliminate instruction emulation?
The breached account shown in screenshot belong to a user at a 3rd party outsourcing firm providing support services for Okta. So he is technically not an Okta employee.

It seems strange that such a user would have wide access. It could be that his account was just used to gain further access, or it could be that his account had wide access by mistake. Or the user doesn't actually have that wide access.

There are talks about superuser access. But is that referring to the user's actual privileges or the fact that he has access to the tool called "superuser" shown in the screenshots?

I need more patience.
>He flirted irresponsibly with NATO

Ukraine has been wanting to get into NATO since 2008, and really wanted to get into NATO since Russia illegally annexed Crimea in 2014. All this happened before Zelensky's presidency, which started in 2019.

Also popular opinion has been pro-NATO since 2014, and Ukraine is a democracy.

> and now his country is at war with a military superpower.

Russia is not a military superpower.
Incoming "lol Russian bot troll" comments for both of us followed by ban.

For what its worth the West is pushing Zelensky to fight. The US doesnt care about Ukraine or Russia. They just want to sell their weapons.
One of the various twitter threads mentions that the account they used was suspended so perhaps they no longer have access.
That's some good suggestions, thanks!

Being up front with it without giving a reason has not gone good for me so far, but maybe I just need to fabricate a reason that is relatable and somewhat true. Maybe it would be ok for people when I tell them: text-only because I don't want to sink time in long meetings. Maybe its worth a shot.

Letting the client know I will reach out frequently and they can as well would also give them ease of mind and trust. That's good and I guess establishing and deepening trust is the main issue why a lot of people rely on calls/video. In my experience text is often more efficient but not preferred, but that might be because of my own problems.
For my new apartment I'm working with 2-3 younger carpenters who's design and quality I really like. It is going to be significantly more expensive than the cheapest stuff from retailers, but still a lot cheaper than the overpriced "designer" furniture from big names. Plus I can customize everything to a degree to fit the dimensions of the apartment better. But I reckon depending where you are, craftsmanship has been completely driven out of the market.

I do fully agree with your point about a lot of people not being able to afford nice stuff upfront and often ending paying more more over the lifespan of the item. But I also think it is also an issue of consumerist societies where people rather want a 100 cheap things and replace them often, rather than 10 nice and long lasting ones.

Then there I think is also a matter of perceived value of especially furniture. I know many not rich but affluent people that don't bat an eye shelling out a lot of money for some electronic gadget or expensive traveling every other year but won't invest in a piece a furniture that could last a lifetime.

So we end up with either cheap mass produced stuff or designer ware for people for whom money doesn't matter. With little choice in between.
This version has the advantage that it respects the actual rules under which trading is done, rather than inventing a new set of rules which aren't used, as a vehicle of ressentiment.
Time for B2B services to support self-hosted installations so the security boundary stays in house.
this seems to be his twitter
https://twitter.com/gbengadewoyin
American journalists and politicians had fun with it.

Cheese eating surrender monkeys might only exist in cartoonland
I didn't claim to have. The concept does not exist in many western european countries that they openly admire as models to emulate though, so I'm still interested to see where you're going with this even if you aren't able to answer my question.
Putting aside the big issues with using the Gini coefficient as a measure of income inequality (very different distributions can have similar Gini coefficients) - and the even bigger issue of ignoring wealth altogether - the World Bank data relies on household surveys which are notoriously unreliable even in Western countries. Those numbers ought to be taken with a big heaping of salt.
It's not really about MongoDB which may or may not be a good fit for your app (personally I was never faced with a good use case, but that doesn't mean it's not any good elsewhere). It's about MongoDB zealots and more generally about people following the trend instead of making proper choices based on their real needs.
That’s not true at all. A significant amount of deep journalistic reporting is based on information provided by the government in response to FOIA requests.
> He flirted irresponsibly with NATO and now his country is at war with a military superpower.

Putin's actions in Ukraine will encourage other nations to join NATO. Sweden and Finland are considering joining now:

https://time.com/6158727/finland-sweden-wrestle-with-the-ben...

https://www.defensenews.com/global/europe/2022/03/04/nato-br...

https://www.npr.org/2022/03/03/1084112625/neutral-finland-sw...

All Putin will achieve is the isolation of Russia. And that isolation will put Russia in China's pocket.
Thanks, I'l check keycloak out.
WFH vs. WFO: Employees ready to quit job instead of returning to office