skysight-inc/HackerNews huggingface dataset:
If through compromising those workers outside parties gain access to sensitive systems, and that situation is not promptly detected and corrected, then the system _is_ compromised.

Okta is not just a bunch of software, it's also staff and processes, and the result is a trusted service they provide to customers. If that service is compromised, it doesn't really seem to matter how?
That would be a real shame. I really want someone to make a high core count ARM processor in the price range of an AMD threadripper that can work with Nvidia gpus.
> I don't recall any civilized government using physical force to pin down their subjects and force-vaccinate them.

Austria may have backed down on their plan to mandate vaccination, but Indonesia went ahead with it[0]. Hopefully you don't view that country as uncivilized. It's true that they "only" went as far as fining people who refused, but I'm sure if you refused to pay the fine there would eventually be some arm of the government willing to use force against you.

[0] https://www.straitstimes.com/asia/se-asia/indonesia-makes-co...
Yes, this is something we would consider in the long run. Functions are great, but not for every use case.
Heh, time was "compliance" was the reason to host your own services. It is a lot easier to be compliant with many things if you're hosting your own services.

Back when I was working in eCommerce (PCI-DSS Tier 1, Cardholder data on premises) it was basically impossible to use hosted services.

As then, it is now: "Compliance" is just enough nebulous of a word to prevent critical thinking.
I think you're misreading "into his 90s" as "the 90s"? ;)
I'm surprised they didn't require Phone # verification given the issue they are having.
I guess that's what meeting the parents is all about? You can get an idea of what your potential spouse might look like when they are older?
Yeah the latinx thing is really dumb (REALLY dumb), but also harmless, esp since almost no actual Hispanic person says that shit.

Luckily Dem voters reject far left candidates in broader elections; see Biden, Eric Adams. Dems currently seem to elect moderates at a higher rate, whereas Republican moderates tend to have to retire (Flake, Kinzinger) or suffer vicious attacks and get voted out (Liz Cheney)
Yes, "fixed" but in a repairable way. they could have just soldered it in.
You can indeed change the email / login on a user's profile an an org admin, but we probably won't know if Okta support agents themselves can also do that.
I guess that's the "fairly" part of your comment?
Aw man, that's sad. I was just reaching for my wallet when I saw the standalone thing and I wondered if that was really the case. It looks radical, but if I can't hook it into my DAW then it's no good to me :-(
It's a 32-bit format in memory and the additions are done with 32-bits.
Not the author, but in response to the many variations of "why would you do this?", the answer seems simple: If you do most of your computing on a Mac, this is one of the few available monitors that has highly compatible resolution and behavior, and if you have a PC for gaming as well, not everyone has the space or desire to maintain a completely separate monitor expressly for the purpose of PC gaming.
This physically hurts to read now that I understand the official position of Okta. I am eagerly looking forward to the unfolding of consequences.
Exactly, Tolkien also got paid, but no one could claim he did it for the money. Both hid and the work of his son to preserve and share his legacy were labors of love.

For something completely different, but the same here is a YouTube clip of Billy Strings playing with his dad, a very similar dynamic here: https://youtu.be/_6U6NCvOfl8
I have no idea why you are getting down-voted. It's 100% true that the absolutely terrible brand that is BuzzFeed spilled over BuzzFeed News and hurt its public perception.
Yes, it is absolutely an indictment on the connector. The story of USB-C is one of people peddling a story that they'd solve every power delivery and data protocol problem of all time by making every connector the same shape, when in truth, having a variety of shapes of connectors can communicate compatibility and that was lost in the push for USB-C
> The planets in the solar system move all accordingly with Newton's equations, except Mercury.

This is not correct. Our measurements are accurate enough now that we have detected relativistic corrections in the motion of, IIRC, at least all the planets out to Jupiter or Saturn.
> is often discussed in code reviews when it should have almost no place. By the time you get to the code review not only should these have been ironed out and shared with the whole team.

That's a fair point. It's my background in open-source and I suppose the specific ways we work in the projects I'm involved with which made me add these things at the bottom. Oftentimes, contributors come up with PRs for new features, and there was no prior discussion about API design etc. (although we highly recommend to have such discussion before starting with the work on a large PR).

I.e. oftentimes a PR review will be the first time I see how something is implemented, how the API looks like etc. It may be different with more controlled settings in in-house development teams adhering to more formally defined processes.
Thanks! Hopefully not brittle at all. Specially since both React and Django are very stable projects, the latter even more than the former.
> The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens (for git), etc. However, I keep 2FA TOTP codes on my Pebble watch only. If you keep 2FA codes on the same file as your password then it isn't 2 Factor anymore, right?

Technically no, but whether or not that is a problem depends on the threats you're worried about.

I'm personally most worried about 1. credential stuffing, 2. keyloggers/client exploits, and 3. Phishing/MITM attacks.

Using a password database allows me to use different passwords for every site, which defeats #1.

TOTP even if it's in the same database solves for #2 since simply scraping the password isn't enough to gain access.

And #3 isn't addressed at all, even if you use a separate device for TOTP.

What I'm not especially worried about is specific targeted attacks where the attacker is attempting to acquire my database and crack it.

Now, if you store your password database on someone else's cloud, that could become more of a concern, as a mass breach and bulk collection of databases becomes a possible attack vector. But I use syncthing to directly share my DB between devices, so I'm not particularly worried about that.

If you're worried about either of those threats, then a separate TOTP device is absolutely vital. But, for me personally, the inconvenience of it is not worth the additional security.
> Currently use Pop!_OS

> I have a high budget

There is some company that makes somewhat pricey laptops and works on some Linux OS. Maybe try looking at those laptops, they might have some support for Pop!_OS.

Edit: The joke here is that the company that makes Pop!_OS also makes laptops that are decent, but pricey.
A life well-lived comes with inherent risks.

I'm not saying I want to go live recklessly, but I'd rather die slightly less old and happy, than old and miserable because I spent it worrying only to realize on my deathbed that I never lived.
The situation is that various Australian companies (think Kangaroo) and DISH network already have Hopper product lines and Nvidia didn't care about getting into a legal kerfuffle and used the name anyway. As to whether Hopper's estate was consulted I don't know.
Explaining the Mac Studio’s removable SSDs, and why you can’t just swap them out
How does 2FA stop bots?
What got me was this:

> Okta detected an unsuccessful attempt to compromise the account of a customer support engineer working for a third-party provider

> highlighted that there was a five-day window of time between January 16-21, 2022, where an attacker had access to a support engineer’s laptop
"Hosting a dinner for" means the white nationalist was the star of the event, a proud Thiel introducing this fellow to his contacts.
This was not an update. That was in the original published version of the post
It's not all cultures, only some. Others in this thread have given first hand accounts of how not haggling has caused trouble.
Sorry. Should have been clearer. There’s a screenshot showing a password reset about to happen for a specific person. We suspended that account. In parallel, we were using our own logging to look for any password reset/MFA change over the last four months and just went ahead and forced a reset for all those users.
Google's debian-based distroless is fascinating: https://github.com/GoogleContainerTools/distroless
Soo much wrong here..

One the "better outcomes" is actually debatable due to a whole host of factors, including that American are generally less healthy not because of our healthcare system but because we have large amounts of high processed high carb food with little excersise which is not the case in the EU.

The only way the US would "save" money on socialize care is if they highly regulated and heavily taxed "bad food" which I am sure you would support but I dont as I oppose using the tax code for social goals

If you look at stats that take into account these factors the US health system is the best in the world. better Cancer Survivor rates, Lower wait times, faster times to specialists, lower Doctor to Patient counts, Semi-private hospital rooms standard, etc, etc.

Also looking a Total spend as a % of GDP is completely moronic statistic to compare as well, and there is NO WAY the government could socialize health care and capture anywhere near the amount of money to pay for it in taxation. Not even close, to believe that you have to ignore all of recorded tax history.
#Tom

#Dick

#Harry
I mean, sure, any statically compiled application can be deployed at scale without any dependencies at all. If you don't consider the application's 1GB worth of compiled-in SDKs and libraries to be bundled dependencies. :)

Back in the day we used to continuously deploy to thousands of servers without VMs or containers. Probably the largest-traffic sports site of the 2000s. But the application was mostly mod_perl, so dependencies still had to be managed, and it was intermittently a tire fire. There was no abstraction to run the applications immutably or idempotently. We actually acquired a company that had built a whole immutable build/deploy system around RPMs, so things became more predictable, but still host OS limitations would cause random bugs and the management interface was buggy. Re-bootstrapping hosts to shift load in the middle of peak traffic is a huge pain.

Containers would have been great. We could've finally ditched Cfengine2 and most of the weird custom host-level configuration magic and just ship applications without fear that something that worked in dev would break in prod due to a configuration or build issue. We also could have changed load patterns nearly instantly, which you can't do with VMs as you have to spin up new VMs to have a new host OS (not that we had VMs, what a luxury!)
This is so dumb on 1000 levels.

I live in Switzerland and I have received literally tens of Schuko plugs because most products come from Germany or are for that market. It is so common that most places will throw in a free Swiss power cable.

I assume this Mac supports 110v to 220v but would require a stupid tool to replace the cable when for example I moved from the US to Europe. Or just 10km up the road from Switzerland to Germany.
Hey this is John! I'm a college freshman but currently interning at Neeva. I had the chance to build a fun project that took on those annoying consent pop-ups we see all over the web now. It's called Cookie Cutter and you can check out the details in the medium post. Thanks for any feedback you might have!
GNOME Maps will receive an overhaul when it is ported to GTK4 + libadwaita. Currently a lot of development is going into the new map library libshumate[0].

[0]: https://gitlab.gnome.org/GNOME/libshumate
No problem! If you search around for "Debian vs BSD", you'll find more exhaustive explanations [1], but it mostly reduces to the fact that BSD is more coherent & organized than GNU/Linux; it's more feature-rich in the domains that sysadmins and hackers appreciate, but feature-sparse in the domains "normal users" appreciate. Depending on your needs these facts can be advantages or disadvantages.

I tend to gravitate towards projects like BSD, since they align with my principles, but you do pay a cost in terms of compatibility with common software.

For example, Firefox does not treat BSD as a first class build target, so it's up to community members to build and deploy Firefox binaries, and report feedback on bugs that break BSD installations.

If access to the most up-to-date compiled versions of popular software packages is a big sticking point, BSD-land may not be the right choice. But if you're living mostly in `vim`, `bash` and `man`, and are willing to roll up the sleeves, BSD feels cozy.

It's maybe a 20% correct analogy (don't read too deeply into it, or you'll draw incorrect conclusions), but C++ is to GNU/Linux, as D/Rust/Zig is to BSD.

[1]: https://unixsheikh.com/articles/technical-reasons-to-choose-...
The article mentions rainbow tables which imply unsalted-stored password hashes. I think that's a pretty rare development practice these days.

That only partially answers your question because the server-side algorithm for the key deriver function and its computing cost config parameters, in addition to the quality of the random data sources, the PRNG (e.g. fortuna), and the salt length, also play a role in the strength.

See: https://owasp.deteact.com/cheat/cheatsheets/Password_Storage...

At any rate, I agree that a long and easy-to-remember phrase is fine, but that's impractical (due to being invalid for most logins) so you can also generate passwords like this (99 = pick your length):

cat /dev/urandom | LC_CTYPE=C tr -cd [:graph:] | head -c 99
Yes, of course.

You can have IPC that's faster than a function call if it's between cores.
This approach reminds me of YACY even though it's only somewhat related.

Instances of the engine indexing locally on the machine where a user is browsing the web.

I'm regularly reminded of this concept of a distributed search index, but at the moment it doesn't seem very likely that it'll gain traction.
Big discussion yesterday: https://news.ycombinator.com/item?id=30760923
Did you have a point, or are you just violating HN policy?
OVH has always been known in France as a super cheap provider run by amateurs.

Use it to host a Minecraft server maybe. Use it for anything else and you're an idiot.
Ukraine hackers target GLONASS for cyberattacks
A CEO of a public company is responsible for selling investors on what he/she is doing. If News is fundamental to the company or to his vision then he is responsible for explaining that or selling that vision. If investors don't believe in it I don't blame them per se I'd just say the company either shouldn't be public or they should have a CEO that can reasonably explain to investors why they should care that News exists.
Sorry, I completely disagree with practically everything you wrote above.

There’s nothing complicated, oblique, or arcane, about short options - if one is versed in Unix.

Usually, the sentiment you’ve expressed, comes from the mouthes of developers, more comfortable with Windows, and/or Python - regurgitating cargo cult lore, parrot fashion - sometimes followed with another regurgitated quip, about moving to a “proper” language, if said script, exceeds n lines. A similar phenomenon, can be seen with the Zawinski quote, regarding regex - usually parroted by people who have not learnt regex.

If one wants to leave supplementary information, regarding the invocation of anything within a shell script, there is already the facility to do such - comments - which take the same form, as comments within the Python language.

Your assertion that Bash is a dead language, is absurd. Particularly when juxtaposed with your assertion concerning Z Shell, immediately thereafter - which is practically identical to Bash, in syntax, aside from a few differences.

Command options, short or long, are not even shell specific. They’re a Unix convention. Why should the writer of a shell script, be at all concerned, with anyone who hasn’t grasped the fundamental basics of working with the platform, for which the script is intended to operate?!

Personally, I’m of the opinion that long options, are GNU bloat.

As for the linked Github repo - getopts - it’s builtin.
Support tickets, or incidents, or escalations might require creating a new slack channel
> I also continue to find it amusing that we can build a person like that and sell it as commercial tech, but we still have to record people talking. (Though TTS has taken an interesting turn lately, after years of not much.)

I suspect part of the problem is that dialog in games is still largely "static"; if the writing is pre-canned then it does not make that much sense to try to develop advanced tts to act it out. The situation will become interesting if we manage to produce sufficiently dynamic dialog system where it is not feasible to use pre-recorded voice acting anymore.
A lot of people are working on it. They mainly live on Patreon. For VR, specifically. It’s the only feasible way to approach 6dof porn, currently, AFAIK.
is there a metahuman like generator? or we need to scan/model it?
You didn't see graphite. Identity providers cannot be compromised!
The main difference is that:

- the weight of uranium compared to the weight of coal needed for the same amount of energy produced is absolutely ridiculous: 2.5 metric tons vs. 7 grams of uranium 235. That make it easy to stockpile it for years to come

- Some "waste" are already being recycled and used again

- uranium is uniformly distributed on earth, there's not the same geopolitical issues that we experience for fossil energy sources such as oil and gas

- I'm not sure whether those 20%/20% proportions are true since some EU countries does not disclose the part of uranium imported from each countries

- Australia, Niger and Canada are also some major players for EU uranium import, none of which want to back Russian war, quite the contrary according to the UN vote.
I never left too. Still using my Nokia E72 business phone. I send and receive lots of text messages for my work, replying using full qwerty keyboard is a breeze.
Plus one function i cant live without - "say caller name" when phone is ringing.
You know whos calling you without looking at the device.

Device is about 15 years old, made in Finland, I have couple of spare ones in my drawer, swapping parts around normally brings it back to life when any problems (once a display went, once the keyboard, 20 minutes fix on the bench with no special tools needed).
Right, but their claim is that there were proper separations that successfully did limit the blast radius.
I do security (albeit not CISO or compliance-style, but commercial anticheat), and in my opinion, if a support agent's account was used by a third party to view anything about my account without permission - any undisclosed email address or name, their system was compromised and it is a data breach.

IMO, support agents also should not have the ability to view or access a customer's account without some form of time limited, auto-resetting-to-opted-out default confirmation that support can view the account from an existing logged in admin.
Important to note that this is a 110dpi monitor and therefore not retina nor suitable for integer resolution scaling, whereas the Studio Display is 218dpi. I care a lot more about resolution and dot pitch than about frame rates higher than 60hz
> A time-traveler from the 80's

You don't exactly need time travel to get an opinion from someone who lived the 1980s... try asking your parents?
I’ve been running Arch on a Razer Blade for a couple years now and it’s been great. Nvidia+linux is a risky move but I haven’t had any driver problems on this machine.
Yeah I was just mistaken about the authorship of the article, I didn't read the byline because it was on Bari Weiss' domain.
I was going to say that the overlaps between one lock of hair to another, between hair and background/hair and skin, and the edges of lips and teeth looked a little poorly keyed, like the objects had high resolution textures but the surface map/motion rig was low-poly...which would be annoying but probably easy enough to ignore in an indie film.

But live? On a single (hard to get) consumer GPU? That's seriously impressive. It makes me wonder how much of this is hand-tuned rigging and how much is physics based; if you tried to shake hands with this digital human using a game controller or VR rig, how would that look?
He said that he is using ArgoCD. I listen more about ArgoCD and less about Spinnaker over the years.

Is anyone using Spinnaker to do K8s deployments in 2022?
Buzzfeed's purpose was to make money. Buzzfeed News was a semi-successful attempt to take money from advertisers who preferred high minded NYT/WSJ type audiences by gaining the reputation of "no, no, you see Buzzfeed News is the serious part, it actually does good stuff!".

It didn't work because the financial cards are stacked against print media, there is basically NYT and then tech billionaire charity cases like The Post and The Atlantic.
I could read the posts, but when I clicked to read the comments I got this:

https://de.catbox.moe/ovt7t7.jpeg

I remember healing a while ago that certain Telegram channels would be blocked on iOS devices due to Apple's content policy, that's what this seems to be about. Update: Yeah I can view them on desktop just fine.
I don't know Nix and can't comment on that, but in my experience, when I've inherited containers that couldn't build, this was usually due to its image orphaned from their parent Dockerfiles (i.e. someone wrote a Dockerfile, pushed an image from said Dockerfile, but never committed the Dockerfile anywhere, so now the image is orphaned and unreproducable) or due to the container being mutated after being brought up with `docker exec` or similar.

Assuming that the container's Dockerfile is persisted somewhere in source control, the base image used by that Dockerfile is tagged with a version whose upstream hasn't changed, and that the container isn't modified from the image that Dockerfile produced, you get extremely reproducable builds with extremely explicit dependencies therein.

That said, I definitely see the faults in all of this (the base image version is mutable, and the Dockerfile schema doesn't allow you to verify that an image is what you'd expect with a checksum or something like that, containers can be mutated after startup, containers running as root is still a huge problem, etc), but this is definitely a step up from running apps in VMs. Now that I'm typing this out, I'm surprised that buildpacks or Chef's Habitat didn't take off; they solve a lot of these problems while providing similar reproducability and isolation guarantees.
It's probably easier to test for bald tires and loose lug nuts than you think. Don't know about bumpers, but I doubt something like that would be covered by the manufacturer's liability. I assume any collision involving the self-driving systems would have an investigation to determine fault, much the same way they do already
Fixed pricing with scarce goods tends to lead to this result, just let supply and demand sort it out and this problem wouldn't exist. Trying to fix this by using 2FA won't change much, it's just an arms race where each side keeps investing more and more money into fixing a problem that doesn't have to exist in the first place.