skysight-inc/HackerNews huggingface dataset:
LAPSUS$ has already responded on Telegram:

'''

https://www.okta.com/blog/2022/03/updated-okta-statement-on-...

I do enjoy the lies given by Okta.

1. We didn't compromise any laptop? It was a thin client.

2. "Okta detected an unsuccessful attempt to compromise the account of a customer support engineer working for a third-party provider." -
I'm STILL unsure how its a unsuccessful attempt? Logged in to superuser portal with the ability to reset the Password and MFA of ~95% of clients isn't successful?

4. For a company that supports Zero-Trust. Support Engineers seem to have excessive access to Slack? 8.6k channels? (You may want to search AKIA* on your Slack, rather a bad security practice to store AWS keys in Slack channels )

5. Support engineers are also able to facilitate the resetting of passwords and MFA factors for users, but are unable to obtain those passwords. -
Uhm? I hope no-one can read passwords? not just support engineers, LOL. - are you implying passwords are stored in plaintext?

6. You claim a laptop was compromised? In that case what suspicious IP addresses do you have available to report?

7. The potential impact to Okta customers is NOT limited, I'm pretty certain resetting passwords and MFA would result in complete compromise of many clients systems.

8. If you are committed to transparency how about you hire a firm such as Mandiant and PUBLISH their report? I'm sure it would be very different to your report :)

_________________________________________________________________________________________________________________________________________________________________________________________________________
https://www.okta.com/sites/default/files/2021-12/okta-securi...

21. Security Breach Management.
a) Notification: In the event of a Security Breach, Okta notifies impacted customers of such Security Breach. Okta
cooperates with an impacted customer’s reasonable request for information regarding such Security Breach, and Okta
provides regular updates on any such Security Breach and the investigative action and corrective action(s) taken. -

But customers only found out today? Why wait this long?

9. Access Controls. Okta has in place policies, procedures, and logical controls that are designed:

b. Controls to ensure that all Okta personnel who are granted access to any Customer Data are based on leastprivilege principles;

kkkkkkkkkkkkkkk

1. Security Standards. Okta’s ISMP includes adherence to and regular testing of the key controls, systems and procedures of
its ISMP to validate that they are properly implemented and effective in addressing the threats and risks identified. Such
testing includes:
a) Internal risk assessments;
b) ISO 27001, 27002, 27017 and 27018 certifications;
c) NIST guidance; and
d) SOC2 Type II (or successor standard) audits annually performed by accredited third-party auditors (“Audit
Report”).

I don't think storing AWS keys within Slack would comply to any of these standards?

'''
This is why I haven't adopted the practice of "Build your artifact along with the docker image that packages it".

Instead, build your artifact and publish it to an artifact repository, just like we used to.

_then_ wrap that artifact in a Docker image.

Vulnerability found in the docker image? No problem. Build a new image with the same artifact.
A reminder that untargeted, indiscriminate sanctions, like those currently meted out by the West on the Russian public through their removal from the global economy, is a war crime under the Geneva Convention
They’re referring to

> By artificially reducing the lifespan of these devices,

An iPhone 6S will run iOS 15, and if you throw a new battery in it it’ll run like new for almost all tasks, with the only caveat possibly being reduced NAND capacity/slower FS performance.
> web 3 = own

1. How would this work for me as a user? Are web 3 "websites" (or whatever constitutes a service or company) not able to retain a copy of my data? Or phrased in another way, what prevents websites from also /owning/ my data?

2. How would this work for me as a service? Aside from my service's domain and internet address which are annoyingly hard to "own", what else is there to own that I don't already own?

I don't share hn's irrational hatred towards crypto so I'm not against joining whatever web3 is supposed to be (in principle) but I've yet to be shown a single benefit in doing so.

Give me a single clear benefit to using or offering a web3 service.
Interesting. Before reading the abstract and press release, I assumed "vanish" was PR-speak for "join into Cooper pairs". It sounds like it's something else, though. A "Fermi Surface" seems to be defined in terms of a bunch of other things I have no idea about, so unless someone comes along with a really good ELI5 I don't think I'm going to get it...
Yeah, managing the DBs is the major complications on doing this. A little discrepancy in binaries are not that always problematic, but a fail on the DB is catastrophic :)
>Got any more fun stories from that time?

yes, but the internet will never believe these stories.

The history of Xbox Live may be one that is better off never told.
I'm building a Flutter rendering engine that can be powered by the back-end. Although C++ is not on the immediate list of supported SDKs, it could be added. https://nexusdev.tools/
On the record agreeing with eatonphil here
A public ledger is not inherently valuable.

A trusted ledger is valuable, but a ledger doesn't have to be public to be trusted. When I swipe my card at the grocery store, I'm not shaking in my boots with my fingers crossed, doubting whether the transaction will be recorded as transmitted or not.

If for some looney toons secret agent reason you need a transaction to be public, you can tweet a picture of the receipt. Or, even better, you can mail it to yourself, the postmark is legally binding.

Bitcoin uses almost as much energy as the entire global banking system, with its associated costs in capital, emissions, and e-waste, to process less than 0.001% the transaction volume of Visa alone, while providing no additional benefit.
What if the NFT itself gets banned from OpenSea?
Sure, you do also need the words though, is my point. :)
Ya it hasn't gained traction outside MS from the looks of it. Lots of services run on it internally.. but even some newer services are using AKS now.
In perfectly readable code, it's easy to notice performance problems.

In my experience, unreadable code is usually where the worst performance problems are, because that's where they are the hardest to find and fix.

You seem to be conflating readability with formatting, which is not what I mean by readability. Poor and inconsistent formatting adds some friction to reading, but it's a relatively minor part of readability.
web1 - read from centralized servers, send 1:1

web2 - read/write/contribute to centralized servers, who moderate ownership

web3 - anyone can read, write, host. Consume for free(termed gasless), but contribution costs. Trustless, so self attesting of ownership.

Content in web2 was free because of an ad supported model.

I think it's important to note that content is free in the web3 world. Which means that anything can bubble up. And when it does - ownership is important.

Proving ownership needs gas but doesn't need anyone.
Contribution needs gas.

Time will tell if contributing to blockchains will remain gas-supported or if consumers will be willing to settle for X, to contribute for free. X could be be rev share or loss of control via some centralization or custody.

There always will and rightly should always continue to exist - opportunities to bring mass adoption via better UX. This may lead to a centralized service who identifies and fixes this gap eg- metamask. Good for them to identify and execute something that people wanted. It's all about finding opportunities in a market eventually.
Folding bikes are better at most of what bikes do; sitting around waiting to be ridden.

There’s no good way to store a regular bicycle. All of them are compromises of convenience, security, floor space and weather protection.
I am also in the boat that thinks Putin wouldn't risk it, and I've defended that argument against alarmists who still fear that an ICBM is on its way to America (which isn't even really on the table).

Then I see him appear on the news wearing a $15,000 Italian jacket and I'm not sure he's got all his faculties.

I think a far more likely scenario is a dirty bomb in Europe or an attack on the
American carrier fleets and forward naval bases.

Once you push the button, Uncle Sam is coming. No doubt. So why would they waste the first shot? And any ICBM directed at the western hemisphere is going to be met with either ICBMs or Navy SEALs in the Kremlin. Rather the Russians will use deniability to their advantage, or if they are making an unambiguous act of war they might as well aim for the west's mightiest weapon... it's ability to summon air superiority anywhere.
Maybe "build one to throw away" extends more broadly than we tend to suppose.

You always are gonna screw up the first one, and the second one can go Second System, so maybe the third time is the charm. If so, then what you'd want is a lot of first time startups getting a little money, with a very, very low expectation of success.

But if you are quite certain the first ones are likely to fail, you'd need some incentive to give them even a little money. Maybe with some sort of Right of First Refusal on your next couple of enterprises. Though that's easy enough to game by making a BS proposal, or working for someone else for a year and then trying again. Maybe 2 years and two enterprises, whichever is greater.
Do you use a CPAP machine? It’s a simple device that blows air through your nose hard enough to keep the airway open. It doesn’t take an intelligent person to operate or adjust one. One would have to be one of them dumbest people in human history to cause injury with one, let alone kill yourself.
If you're referring to something in the Villenueve Dune, I don't remember it in enough detail to know what you're talking about. And I only know the Lynch one from snippets and memes. :) I think I agree about breaking formation. Just once I'd like to see a movie that took battle formation seriously.
Just got busted

I did not know this is a false quote

:)
So if “web1” was supposedly read only and the example of that is a blog, who wrote the blogs?
I just don't see how that use case couldn't have been more easily served with a boring old centralized database. Why do you need a trustless system where all the users are either in-house or contractually obligated to not screw each other over?
Yes of course I accept all of that — one can hardly have missed that in the last five or so years, since completely unreasonable positions have been raised to the status of dogma by educated liberals in the sorts of workplaces that you and I work in. One can and should remind the world that it shouldn’t be that way: shunning and shaming should be reserved for extreme opinions.
> Or we could just regulate it and then this consumer-hostile issue wouldn't exist.

But I specifically want a device that only runs code from another company. Why should the government say “only enterprises can establish this absolute security trust relationship with their hardware vendor”?
Do these things not exist?

- My LG Smart TV

- A TI-84 calculator

- The Peloton (exercise equipment)

Are you trying to argue that because the Switch uses components also used to build general purpose devices that this somehow implies some kind of general purpose “identity” on all derivative devices and an expectation that somehow every product should be more clear that “well actually, this product doesn’t exist because it has a CPU and a screen”?

I’m truly grasping trying to understand your argument here.
What sanctions are you referring to? Danish ones?
I got it in less than 10 tries.
Yeah, and then nearly half of the miners kept going with the old fork anyway. On Ethereum Classic, the theives who scammed $400 million worth of 2016 ETH from the founders, valued at who knows what now, still have that money, and they have spent it, and it's still considered good on the ETH Classic chain.
The Senate didn't surrender, and still maintained the loyalty of the wider governing apparatus that collected resources for its campaigns. To be able to raise two dozen legions after the losses suffered in the first three years of the Second Punic War, suggests to me an extraordinary level of social cohesion and stability of government rule.

I believe you are incorrect about the defections as well. One source supporting this notion is Adrian Goldsworthy's "The Fall of Carthage: The Punic Wars 265–146 BC", which, by way of Wikipedia, claims:

https://en.wikipedia.org/wiki/Second_Punic_War#Hannibal_cros...

However, the majority of Rome's allies remained loyal, including many in southern Italy.
Blockchains can be public or private, the key is they are distributed ledgers.
Heartbleed didn't cause tens of thousands of financial transactions totalling billions of dollars to be retroactively reverted with a technically guaranteed lack of recourse to the people whose accounts were drained as a result.
Nothing more "rewarding" than returning to the office only to sit on Zoom all day. There are days when I have back to back meetings and I have tried, practically begged, to be allowed to work from home on these days to no avail. "We may miss out on valuable spontaneous ideas!" I have yet to see these face-to-face moments lead to anything actually productive.

But look at my sprint numbers during work from home? Through the roof. I was to the point that I was begging for more tickets because I was chewing through the normal workload. Upper management doesn't care. They want a butt in the seat. Rumor is that their bonuses are tied to RTO numbers.

Zoom has become the new "Death by Power Point". At least at home, when Zoom Fatigue sets in, I can take my normal lunch and have a quick nap.
Does this mean you don’t want to buy a foam trapezoid with a strap for nearly $200?
Embrace anxiety and harness its power to become more productive and resilient
This sort of argument reminds me of the old doctrinaire Marxists, who insisted communism could work if only it could be done without authoritarianism.

Turns out Web3, in theory, sounds fine, but the implementations and uses of it all fall back to centralised networks and nefarious purposes.

I think it's time to recognise Web3 for what it is: a massive con fronted by people who sell a fantasy of open, decentralised computing designed to free everybody from the excesses of government, but are actually implementing something far worse than the system it's supposed to replace.
The Web is here, useful, has much lower barriers of entry, and although it's wasteful of energy in a lot of ways it isn't as aggressively and intentionally wasteful as cryptocurrency. I will happily stop using this argument against the crypto ecosystem as soon as it is not true.
Probably in logistics where many nodes of many companies need to record offline quite often.

Trucks, warehouses, resellers, manufacturers, all with their own systems and problems can record to the same ledger reliably.
Within reason I do believe some things. But given the state of the world and the people in it I respect your view on this.
Is IPFS “Web3”? Seems like it should be. I have used IPFS a number of times and am a fan, but keeping up with buzzwords is a lot.
Not to be glib about this, but I mostly blame Twitter. It's a clique-forming engine.
UserLAnd – Run Linux Distros and Apps on Android Easily
> companies are legal fiction that don't have rights.

Companies are quite literally legal persons and have the same rights as any natural-born citizen. It’d be a violation of a natural person’s rights if you forbade them from exercising those rights with others, companies only simplify the legal side of asset ownership and taxes.
Why does automation have more of an impact on PoC and women?

I would have thought its biggest impact would initially be on the types of jobs typically dominated by male workers.
The trick with the electric grid, is that you basically have network of leaky plumbing, with pipes of various sizes, with heterogenous congestions throughout. For example, the EIA estimates that the U.S. grids loose some 5% of energy in line losses between the generator(s) and the consumers.

On top of that, that in states with high renewables, like Texas, you occasionally have grid congestion that causes wind turbines to curtail, or shut down, in order to balance the generation with the consumer's loads.

A rough picture, seemingly updated every 5-15 minutes, of the broader 'nodes' in the U.S. grids can be seen at https://www.eia.gov/electricity/gridmonitor/dashboard/electr...

Drill down deep enough into the data, and you will unearth the recent tracking of renewables in each of those nodes.
Just because you can’t buy an ASIC Ant miner doesn’t mean that they have not developed one internally and are running a monopoly. (Spoiler: Bitmain already developed several ASIC miners for Cryptonight in the past)
A lot of anti-crypto technical people are also very interested in a subculture I like to call "ethical computing" and part of that subculture is constantly talking about how ethical you are, how much FOSS you use, and how evil tech $TECH is destroying the world (where you can substitute "ads", "blockchain", "GUI interfaces", or "Golang" in depending on what you want to cast as unethical/what you dislike). There's usually (though not always) a grain of truth to these positions, but I personally find the movement to be facile and adherents are usually zealous in their ideology.
It’s not a better joke, because he screwed it up… with C, E, and A the punchline should be “We can’t serve a minor here!”

Of course, that joke sucks too. But, at least it’s not defective.
> blaming investors is nonsense. Corporate officers are responsible for having and selling a vision.

That's a strange point to make in a discussion about how investors are pushing management into making the short term decision.
If we limit ourselves to Bitcoin then we're at a sliver of the web3 ecosystem everyone is casting their hopes upon. And Bitcoin in its current state still seems more like a blockchain working prototype and isn't 'feature-ful' enough to replace centralized finance.

But proof-of-work's energy consumption is what kills Bitcoin for me.

For what it's worth, I consider myself crypto agnostic. If a tech delivers something better then great.
Ask HN: How to explain that ML approach is not 100% perfect?
Hi, I am having problem explaining to my team members and employer the efficiency of my ML models.

People in software companies tend to think that since machines can perform perfect logical and mathematical operations, anything run within them will also inherit this property, including AI.

Currently no matter how hard I try to improve my AI model (generating more data, applying different augmentation, model architecture,..etc) they will still trying to find input data that proved my model is not "generalized" enough.
From a practical perspective people usually say "hey John (at Dewey), what are your thoughts on X?"

They also put "privileged and confidential" in the subject and/or email body.
Hah, I love the idea of doing this. Detect a bot, change the price and put a big banner up that says “hey, human, click here to pay $40 instead of $4000”. Only works once or twice before bots would catch on and check the price, but I bet a ton of auto-order bots don’t currently.

Then write it up and get that sweet HN karma for defending the Pi supply.
maybe company can stop people's device will influence their monkey?
I think the point should be that society benefits greatly by giving room for a wide variety of thought and opinion without shame and judgement. Opinions, generally, shouldn’t be considered odious, rather, the actions we take that impinge on others directly.

As a teen in the 80s, I was a conservative on a debate team full of liberals, including members of the Young Communists. Guess what- we were all good friends despite being ideologically at odds.

Having room to rationally discuss our differences makes for an ability for a pluralistic society to have open debate without rancor and violence. Using well formed argument rather than vitriol and public shaming to truly convince rather than force public agreement and private grievance seems to me a better recipe for a harmonious and just society.
Crypto is a scam that is approaching bezzle, and the early entrants need one last big round of rubes so that they can cash out, web3 is the latest of a long series of meaningless buzzwords to draw in the last suckers.
I noticed this days ago on my forum. It’s only on old images that would typically not display the image anymore anyway as the poster did not upgrade their imageshack when they changed things some years ago.
The grace period does include the time spent to execute the preStop hook yes.
> I assumed "vanish" was PR-speak for "join into Cooper pairs".

I don't think so, because that is a known and well-understood feature of any superconductor (not just high temperature), and the press release makes it seem like whatever this "electron vanishing" thing is, it's something just discovered in this paper, or at least something that's particular to the high temperature superconductors being studied in this paper.

> A "Fermi Surface" seems to be defined in terms of a bunch of other things I have no idea about

Electrons are fermions, which means they obey the Pauli exclusion principle. So if you imagine a piece of material like this "cuprate" semiconductor and start out with zero electrons anywhere in it, and then you start to put electrons in, no two electrons can be in the same state so they will start filling energy levels from the lowest level on up, in much the same way as electrons fill energy levels in a single atom. So you can, very roughly, think of the material as being "filled" with electrons the way a container fills with a fluid. The "Fermi surface" is then just the "surface" of the electron "fluid" filling the material, when the material has its usual number of electrons based on how many atoms are in it and what type of atoms they are. In less metaphorical language, it is the "surface" formed by the highest energy levels that are filled.

In a single atom, the energy levels are pretty much fixed regardless of external variables like temperature (external electric or magnetic fields can change them some, but not a lot, and not in ways that change the qualitative behavior of the atom). But in a material containing a very large number of atoms (there will be something like 10^23 of them in a typical sample of superconductor material like those in this experiment), the energy levels can change as temperature and other external variables (like the magnetic field) change, not just by small shifts, but by changing the whole "shape" of the levels, and hence of the Fermi surface. That appears to be what is happening in these superconductors.
Maybe. It's also likely that they just don't allow any changes. Manual updates require action, automatic updates require no action. People default to no action and it requires a fair amount of effort to get someone to take action.
The alternative is “you can’t provide security updates because those updates might render the device useless”, which would put us back in the 90’s and would render every iPhone not made within the last 2 years a constant exercise in navigating a minefield of spyware sites looking to exploit some WebKit vulnerability.
Turns out most people wanting to do international transfers without a middleman are criminals. Regular people are for the most part fine with international transfers going through banks, likely via SWIFT.
Mental Health Considerations for Startup and Project Founders
This seems to be common, given disclosures that other companies have been doing the same thing. Since Slack is not end-to-end encrypted, imagine if Slack was compromised. The amount of credentials an attacker could have access to by just doing some searches would be quite devastating to a lot of companies.