skysight-inc/HackerNews huggingface dataset:
> Meta on the other hand is a rebrand of Facebook (the company). There is no holding structure. If you were a Facebook employee, you now work for Meta. Employees at Instagram, Whatsapp, Oculus, shared infra teams, and other minor projects all work for Meta as well.

It doesn't make much difference to your line of reasoning, but at least WhatsApp operates as wholy owned subsidiaries, so there is some amount of holding company; note that the terms of service of Instagram are between users and Meta, but tos for WhatsApp is between users and WhatsApp LLC or WhatsApp Ireland Limited depending on the country code of the registered number. Note: I worked for WhatsApp until 2019; I don't know if WA Ireland is a subsidiary of WA LLC or Meta. There's some other overseas WhatsApp legal entities as well, although I don't have a list.
> or user-controlled authorised keys and without 2FA and without host key verification. There are trivial browser based local network attacks to gain reverse shell access with such setups.

I'm struggling to see how that attack works without a copy of the private key.

Any pointers for what to search for to understand this better?
Absolutely doable. The other question may be how this can help from "cyber attacks" but I guess that's for you to figure out.
As opposed to over 400,000 people living in 'modern slavery' in US even today.
If you are working within another framework such as Wordpress, the !important tag is a lifesaver that allows you override styles you simply cannot change without a lot of effort and understanding.
Proxmox Mail Gateway, Open-Source Email Security Platform
I don't think the OP's point was about rights as an individual on a corporate network, more about trying to backdoor your staff's equipment and the consequences of that.

To use your camera analogy, you better have a good lock on the security room holding the tapes.
This is pure Putin's propaganda.
Implementing Atoi is a fine interview question imo.
I know somebody with really impressive engineering skills who works for Rolls-Royce and graduated from Rose Hulman. Anecdotal but if he is anything like their typical students, that school has a good engineering department.
for companies that are alrady gsuite users, what does okta provide over what one can get with gsuite saml integration?
Maybe experienced engineers could help by providing a set of guidelines for writing drivers, applications in a battery-friendly way so that the rest can start what free/open source does all the time : long, grunt work...
Maybe recommendations work great for you. For me, the recommendations are worse than useless. I can't remember the last time it recommended something I actually wanted to watch. For instance: today the top 50 recs are all either things I've seen before or are videos that are from my subscriptions and I have decided I'm not interested in watching. Apart from that there are only two actual organic recommendations:

1) How to survivie outside in -25C weather. - I have no interest whatsoever in bushcraft and bouldering but youtube has decided I should be and keeps pushing these since someone in my house is into these topics which shows there is IP-based topic targetting going on

2) Why the Dutch government has the best graphic design - I don't even know where to begin with this one

My mix I actively hate and literally remove every single time I see it. I wish there was a flag to turn it off. When I put music on I want to put a specific thing on - I don't want youtube to decide for me. Doubly so since it is so profoundly and consistently wrong in its video recommendations.
Indeed. X might be the hyped up flavour of the day, but if you've got large codebases and/or workflows based on Y, then changing to X is a) non-trivial and b) X may not solve the problems as well as Y.

As an example from my experience, when Apache Spark became popular (around v1.8), there were a fair few people in certain circles sneering at Hive, clearly Spark was superior because you could cache intermediate results to RAM.

Except Spark at the time (I haven't used it in anger since v2.2) was rather terrible at the very large datasets Hive could grind through with no issue. Sure, Hive was slower, but then it had the distinct advantage on very large datasets of not dying with an OOM error 2 hours into a job.
This Note 10 Lite has one!

And I must admit, I've never used it. But I'm reassured that it is there.
Founder here, happy to answer any questions!

There is a lot of conversation here about building your own vs using something 'centralized'. All software comes with the “build vs buy” tradeoff.

Our goal at SuperTokens is to minimise those tradeoffs and give you the best of both worlds. That is - The power of build and the speed of buy.

You can migrate to and from a completely self hosted solution to a managed service as your needs change
I drove for 6 years with 3 different bikes (125cc scooter + 125cc small bike + 600cc bike)... and as much as I love it, I gave it up. I have to fight the urge to buy a new one every few months. I've fallen & had accidents 4 times and I'm lucky to be alive to be honest. It helps to know the stats around the death rates and to watch a few accident aftermath scenes to cure yourself.

I truly do want everyone to drive them for all the benefits they bring but I also truly don't want a single person to die like that, so I no longer recommend that other people buy them (not even a scooter for short distances).
Thank you

Bookmarked your marketplace btw, love the idea
That sounds like the start of a zombie movie.
It doesn‘t need any keys, since the protocol itself is vulnerable to this. The Identity Request message that is sent is unauthenticated, but the phone replies with the IMSI nonetheless.

Note that this is just one part of the attack, the attack also includes fully passive localization of phones.
Well, it was "IULIUS", if you like to start nitpicking ;)

To elaborate: the character "J" was inexistent in Capitalis, which is the then used font face. Hence, the original way to write his name is with an "I".
The GNOME Calls app in the Librem 5 can do SIP calls, and the SMS/MMS app Chatty can do XMPP (OMEMO encryption is cuddly though) and Matrix support is being worked on (as in not enabled by default yet).
There is a lot of conversation here about building your own vs using something 'centralized'. All software comes with the “build vs buy” tradeoff.

Commercial open source companies (COSS) minimise those tradeoffs and give you the best of both worlds. That is - The power of build and the speed of buy.

You can migrate to and from a completely self hosted solution to a managed service as your needs change (for many COSS alternatives)
> even if there are open source alternatives out there

This reads to me like you are unfamiliar with keycloak, which is a very mature and capable solution with plenty of support for everything you mention other than SCIM.

Hosting it is not overly challenging, running it in a container would suffice for most companies. Updates are in my experience a smooth process.

I'm not claiming it's as easy as an "auth as a service" platform, but as we see, that comes with its own costs.
For people wondering about how they get access to these systems, it feels like they use the weakest human link in the chain.

I checked their telegram group and I can see that they specifically recruit people with access to VPNs/internal support systems. This okta breach seems to have happened through similar means. The group has made specific calls for access to gaming companies, hosting providers, telcos, call centers, and bpm providers. They offer payment.

It doesn’t feel difficult to see how some overworked, underpaid support agent (or even a well paid disgruntled one) might decide to go with this. Just takes 1 well placed agent to give creds and this group has access to a huge attack surface instantly. This might sound like an overreaction, but corporations in the future might need to make least privilege access and access logging everything a priority from day 1.

https://t.me/minsaudebr/162 (Link to the recruitment message)
You could probably find a riscv intl member company willing to donate small fpga boards, but if this design barely fits on an AWS f1 instance, I think realistically that'd have to be a 5 digit price board

For reference, Digikey unit price for a VU440 floats around the $40-60k range
Yes, camera quality is one of the main drivers of differentiation between device choice in many markets.

Interestingly, it's usually "more processing the better".
You can always just push it down the road, load the whole thing on a truck, or carry new batteries to where it's parked if it comes to that.
This is true, yes.
Yeah it's a huge differentiator. But there's limits and tradeoffs. Likely those guys were super productive in one very narrow thing.
Well, do you want a promotion or not?
That is interesting! It rings true, but I never looked at it that way.
Yes, that's why I used those two as examples.
>and so ambitious people started looking inward to gain power instead of outward. This led to a lot of political division and slow erosion of political norms.

On the other hand the narrative that America is going the way of Rome has been an ongoing thing since at least the 1950s, in different decades the thing that the person crafting the narrative felt was really bad became the cause of Rome's fall. I suppose it is a favorite to write about because Rome was a Republic once, and America is a Republic, and Rome fell and it was a big, big deal. So people can get really worked up over this idea.

Many of the 'causes' of the coming downfall have been bad morals in one way or another; narrative is that Rome fell because of its weakening moral fiber, so in the '50s this weakening was caused by miscegenation, in the 60s debauchery and emasculation of the younger generations, 70s the same and maybe just being tired out by the discipline required for maintaining empire, 80s homosexuality, I think 90s was emasculation of younger generations again although I think there was still quite a bit of gay panic then too.

So nowadays hmm, "ambitious people started looking inward to gain power instead of outward" oh yeah, putting personal ambition ahead of social duty, that's a recurring one, I think it was a common complaint in the 50s as well.

I mean I sure do think things are not that great, but not sure if I buy that there are any more actually relevant similarities between the fall of Rome and U.S than there are between the Kennedy and Lincoln assassinations.
Some weeks ago I resolved issues, for a friend, with searching for files or emails within outlook.

The results for searches firstly did not make sense, some files/emails found but most not.

I resolved the indexing of files by finally finding the right settings page after some time. The only feedback that I had done the right thing was seeing the “number of files indexed” incrementing.

For outlook, I was expecting some settings page within the app that would explain why emails were not being found. After some more time I found that the settings page was outside of outlook! I cannot remember where or how I fixed the issue but it was complete bullshit.

Every once in a while I have these experiences and and wonder how most people live with their computers and the amount of stress and time wasted on stuff that you would expect not to have to deal with in 2022.

Even though I have a soft spot for Microsoft, I abandoned their flagship product, the operating system, many years ago and was probably one of my wisest choices.

Just like I don’t use Google’s flagship product - I just hate it when companies ruin something near perfect by adding shit to please everyone or to milk it so much for profit that it becomes just a pile of trash.
I wonder if it would be possible to counter this with policy, something like:

> If you receive a credible bribe and report it immediately to X we will report to relevant authorities and provide a bonus equal to the value of the bribe (capped at Y).
Here is a video on how it works:

https://youtu.be/hTsrDpsYHrw

While currently, thr stations have to be manned, there is potential for this to be completely unmanned drivethrough where you take the car and never have to get out of it, you pay and the battery is changed for you in 3 minutes (which also looks like it could be improved, and that could come down to less than a minute).

I have no doubt that this will absolutely kill the competition.

Also, it doesn't have to be one standard size. A standard interface with a few standard sizes will work just fine.
2 weeks?
Correct me if I'm mistaken, but Romanians have a very strong haggling tradition. I've personally only been two weeks in Romania, but even in other European countries the Romanian vendors would recognize my wife as Romanian and begin haggling with her in Romanian.
I'm disgusted with Telegram. They really have turned out to be 'just like all the rest'.

Although I moved to Telegram from Wire, for software reasons, it was not long prior to the WhatsApp scandal when, alongside Signal, Telegram were trumpeting their privacy, lack of censorship and respect for freedom of speech. All of which is now looking like just another cynical bait'n'switch exercise.

Shame on you, Telegram!
European Space Agency suspends Mars rover launch
The screenshots are very worrisome. In the pictures below, LAPSUS$ appears to have gotten access to the @Cloudflare tenant with the ability to reset employee passwords

[1] https://twitter.com/BillDemirkapi/status/1506109956298317830...
I didn't know that this knowem existed and I thank you for liking my design over that. Few people asked me to include more extensions but I think that will pollute the UI. I will think of something nice UI that blends with existing UI and also include more extension over time.
My memory fails me, but I think it was Ozzy Osbourne who said he didn't mind people copying him and Black Sabbath. What was important is that they add some of themselves to it, that's how we evolve.

And I agree. All art is copied to begin with, it just depends on how much of yourself you put into your version. If it's a lot, then it will appear quite original.
>You have to assume the authorities, and others, are listening.

Given that Google is a publicly traded company and thus has to follow federal securities laws and keep much business communication on the books anyway I don't know why we're framing this as 'the government may be listening'.
I don't see how it is a rip-off? There are some similarities in both being low-budget raw black and white movies, but that is a whole genre.
> So when I learn a language I don't even look up unfamiliar words if I can still guess the general meaning.

This is the kind of thinking that led to a friend of mine and his entire family, touring Germany, saying the word for "apple juice" whenever they meant to say "thank you".

I'm not even kidding.

Comic example in film: in the Oliver Reed film Hannibal Brooks, a misunderstanding leads one of the major characters to believe that elephant translates into english as "we're-here".

There are several misunderstandings in translation between Australian Aboriginal languages and English.
Refactoring becomes the dual problem space of both programming and editing.

It's simply more work - but that "more work" is vitally important, tedious, and resistant to any kind of automated help.
Tell HN: A $40B company killed my 2yo son. Now they force me to keep silent
My 2yo son was struck and killed by a garbage truck next to a children's playground in the SF bay area less than 2 years ago. The driver who has fled violated multiple traffic rules which directly caused my son's horrible death. We have evidence that the company's unimaginable level of negligence allowed this to happen and now they want us to sign an agreement forbidding us to disclose the details.

I'm writing this in great pain as I was not able to talk about it for a long time. My entire family were devastated. My mom passed away unable to accept the loss. My wife suffers PTSD. I stopped working so that I can go to the cemetery to stay with my son everyday. It's been almost two years.

They see our weakness not strong enough to go through litigation as it tortures us. They offered to settle through mediation with a laughable amount of money which I can earn in less than 4 years. And they want me to shut up so that they may do whatever they want to continue killing children in our neighborhood.

My family want to settle and avoid the additional suffering. I feel so weak. I want to protect them as much as possible but know in my heart I need to fight. I would never forgive me if one day another child gets killed and I could have avoided the tragedy if I choose to fight.

I need help.

What would you do if you were me?
Certified doesn't mean they use it that way
You can always get a PinePhone and switch those kill switches off ;-)

Delivering all the messaging apps on a GNU/Linux device seems like a difficult task though, from what I’ve gathered about apps that others and I tested [0].

[0] https://linuxphoneapps.org
In my country, increased housing density, or new social housing builds, are routinely opposed by existing land/home owners in the area.

Whether it's because increased density would spoil their views, or make parking harder to find, or the social housing would bring in "undesirable elements" or lower their property value, the incumbents have a lot of reasons to oppose housing changes that would benefit society as a whole.

Allow me to introduce you to the acronym NIMBY[0]. Often found in newspapers with their arms crossed looking stern in front of a building site. And you'd be amazed at what they can oppose - kindergartens, schools, even playgrounds (as they increase noise, and there's a risk of balls coming over the fence!)

And planning laws that require authorities to consider submissions from residents are one of their best weapons - after all, it's typically the wealthier who can afford to own property, and so it's often the wealthier who can form groups that hire top tier lawyers to fight developments they're opposed to.

[0]: https://en.wikipedia.org/wiki/NIMBY
They still do, since in 5G you can capture a SUCI, replace it on a later connection attempt, and observe if the phone can still attach. See [1], section 5.2.3, and it‘s implemented in [2].

Finally, localization attacks could potentially still work as well.

[1] https://arxiv.org/pdf/1806.10360.pdf
[2] https://dl.acm.org/doi/10.1145/3448300.3467826
American fire trucks are absolutely massive compared to their European and Asian peers.
Libwebsockets HTML and CSS Renderer for ESP32
> Battery life is an area that may be difficult for smaller phone makers to compete on.

It would become very easy if they realized that a lot of users who buy a Linux phone would probably be happy to trade thinness for battery life.
But you said you want a company with expertise, who has more expertise at building and running an SSO service than a company that's selling that service?

How do you have an SSO system without a centralized service? Whether you buy it as an outsourced SaaS service or run it yourself, it's still SaaS, but now you're on the hook for managing it and keeping it secure.
It sounds like this idiom has been comically overextended for effect, though.

Sometimes this is funny, sometimes it's aggravating.

In this case, funny and extremely apt.
Euh, nope.
To all those commenting on how terrible of an idea this is: what if it includes a kill switch that's fundamental to its existence?
(Where kill switch is eg. a vaccine to the vaccine as a break glass option)
If you are optimizing for keeping eyes glued to screens to deliver more ads, people being hateful to each other is very engaging.

This certainly predates social media (tabloids, tabloid television), but social media definitely took things to a new level.
Keycloak supports 2FA/MFA, Active Directory, LDAP. You might need a plugin for SCIM, but it does a whole load of other wonderful things, and it doesn't cost $2 per user per month.

You will have to find someone to host and patch it, but we shouldn't pretend it's up there with write your own crypto.

Using saas is fine too. Often there cheaper than hiring a person until you need said person anyway, and at that point they're just a single point of failure, and people do underestimate the effort to run a production service well.

But we shouldn't be so anti-intellectual that we pretend that it's the only way to do things, and that well supported foss products don't exist.
I tried reading some literate code, and I have troubles understanding it, compared to well structured normal code with moderate amount of comments.

Sometimes when you are writing an article it may make sense to write LP-like snippets of code like

int my_function() {
// Initialize variables
return 0;
}

but you don't really need to invent the whole "literate programming" concept to do this and you don't need to write all of your code like that.
And “fan deaths” brought us some neat things, like fans with timers in them.

I do not see what neat things “sacrificing cat person” will bring.
I very often find that my mind jumps to X as a solution. Then when X wasn't picked two things happen.

Firstly, and sadly, I get a bit mentally stuck on X. Secondly I assume I have missed something. Whatever I have missed is probably quite important, since otherwise X was a good choice.

Both of these effects mean that I will probably learn a lot from knowing why someone decided not to do X. So, if I've been mulling the question for a while, and can't get an answer, I think it makes perfect sense to ask "why didn't you do X".
After all, that is exactly what I am wondering in good faith.

It sucks that the question is often used sarcastically, because to me it's a very useful question for understanding someone else's process.
It has also mutated to act like the wild-type virus and cause polio. https://www.who.int/news-room/questions-and-answers/item/pol...

A few years ago, there were more polio cases caused by vaccine-derived virus than the wild virus.
‘Desk Accessory’ Pays Homage to Macintosh
You're assuming someone places value on proper documentation because they need proper documentation to make it "accessible to you". That doesn't have to be the case.

For me, lack of proper documentation constitutes a red flag, and says something very negative about the project. The question "Is it properly documented?" serves as a simple and convenient way to filter out projects that have a low chance of being mature enough to fit my needs.
Hi pie_flavor, I am interested in learning more about windows myself, since I am using it on a daily basis. I have found it quite difficult to learn deeper about windows (unlike linux) and look into the "power user" features since I find most of the information/blogs on windows is usually surface level and things being described as a blackbox. Seeing that you quite like the windows API and are familiar with windows quite intimately, would you please be interested in chatting with me for windows resources which I can use to dive deeper into and learn more ?

Would really appreciate if I can get in touch with you on some other chat based social platform. Thank you in advance!
https://www.thingiverse.com/thing:1985100
The grammar is wrong: It's
"das große Stammbuch" but
"Philipp Hainhofers großes Stammbuch".
Company headquarters and server location – both must be right
>Have 3d printed ones shown up yet?

https://www.thingiverse.com/thing:1985100
You're confidently incorrect.

Allergic reactions to vaccine are not 1 in a hundred, they're generally closer to 1 in a million.
Maybe, but only if observed from the outside - collision of properties from within a sufficiently large sample.

From the point of view of the gp it is a collision of its own property (sample size 1) with properies of something else, of possibly huge sample size (all things discussed online) and not even independend (would gp have read the post and posted without having been there recently?).

Not exactly birthday paradox. This thing needs a different name.