skysight-inc/HackerNews huggingface dataset:
I lost faith in Okta when we implemented OAG. They don't have an AWS marketplace version so if you want to run it there you have to manually convert their ESX appliance. Once it's up and running you can't login and get a shell. (Well, you can using Systems Manager on AWS...) and installing any agents on the box means support won't help you with anything.

Then their SNMP mib doesn't work properly. So you have a a box that is proxying some of your most critical systems that are so old that to integrate them with MFA requires OAG (think mainframes, old ERP systems etc) and you have to take Okta's word for it that the server is secure and not hacked.

They do thankfully support Syslog for logs, but again you have to take their word for it that you're getting all the logs, because you can't access the system to verify.

Having said all that. OAG solves a very real business problem and it is hard to find a competitor in the market with the level of integration it has to legacy platforms.
The term arose and spread because of people who were serious about calling the French "cheese-eating surrender monkeys" and while they were indeed ridiculed by the majority it was neither a joke nor fun.
Digital cameras had shit like face detection too, but yeah they are more advanced but still too stupid to just work, I remember a picture was posted where the code made a leaf appear on top of someone's face, like fuck this photos are fabricated, object are moved around, hidden or made to appear - you can't just use a photo as evidence without first knowing all the tech details on what algorithm created the photo.
There's a mix of "The Peter Principle", lack of experienced engineers, too expensive to acquire engineers, at play in the IT world. But as far as I recall that was always the case.
That bath scene is so iconic, it could be elevated to the rank of technique. If I made a film and had to express that feeling, I would use that scene.
Agreed. It’s all speculation at this point. I hope I did not make it sound like I have any evidence to backup my speculation.

I was just trying to come up with a threat vector to explain how it might be possible.
https://nitter.net/_MG_/status/1506109152665382920
There's one of these in one of the cemeteries in my city. We'd go there as teenagers at night, turn the car off, put it in neutral and....
I agree that DEI programs rarely take this form, but there are places where this is really the model, including in my program. Even then I would not claim that it is practiced perfectly, but it seems to do a pretty good job of emphasizing the right things.
I notice that the first video is from a PBS programme. Funny thing, I first learned about the hand signals from another PBS production, Open Outcry (https://www.imdb.com/title/tt0816256/). It was once uploaded to Youtube in several parts, but unfortunately I cannot find the playlist anymore.
Some big publishers are dropping their paywalls on Russia-Ukraine
Right I mean you said you can't respond immediately but that doesn't mean you can't be relatively responsive as long as it's within a few hours or a day and you read and reply thoroughly and show evidence that you are making progress.

I normally do give people access to the git and also regularly deploy. Also I pre-authorize X days or a week of work and don't continue until I get paid for the last chunk. That way both parties are seeing real things happen routinely -- software delivery and payment.

Rather than for example having a two month long project with one payment and the website only really does anything useful at the very end.
Those make sense if you are trying to advise someone, less if you are trying to learn from someone.
Sadly a whistleblower protection becomes an organized victim blaming too fast and easily
Requiem for a Dream isn’t Perfect Blue. But it does treat its ideas as fair game.

yes. Ideas are fair game. An should stay fair game
It's probably not and it definitely doesn't.

Operational security is hard and people have a lot on their plate and in their minds, so forget and slip up etc. My mental model is that you are never seeing the totality of communications, but instead imagine people are having communications on several channels (let's say in person, via a phone call, over Whatsapp/SMS/DMs and over email). A conversation in one channel will spill over into another channel. For instance in person or via a phone call will often lead to a "one more thing" moment or followup and the person will follow up over email or dm instead of in-person/voice.
Fedora considers curl-minimal: restricting protocols may increase security
are they just putting a Pi in a Mil spec case?
where are they getting the mil spec chips from?
I have to admit I’m struggling with this. I know git and PR-based workflows inside out. But I’m trying to read https://jg.gg/2018/09/29/stacked-diffs-versus-pull-requests/ and the penny hasn’t dropped at all. Nowadays github has a “squash abd merge” button; it’s unclear how many of the points in the article would be addressed by that.
You need your family on board if you wish to fight successfully.

You need everyone steeled for combat, and ways to shelter those who can't handle it (without judgment). You need to develop a strategy, and it must encompass your entire clan.

A campaign is not fun. It takes years of blood, sweat and tears, and it's not even guaranteed. You need to decide what losses (yes you'll have them) you can handle, and which you can't.

But start with the family in a respectful way that honors how each member feels (including yourself) and what they can do. You'll get nowhere without their support. You need to listen to them, and they to you (but mostly you listening to them).

And if you can't get their support, then I'm sorry you'll have to let it go. Going in without it will tear your family apart.
My guiding principles after 20 years of programming (2020)
I made no such claim . . . .

The video explains in detail exactly what I was referring to . . . .
They're claiming a few different specs:

==============================

Parvus DuraCOR Pi
* Raspberry Pi CM4, model CM4108032.
* Low-SWaP IP67 rugged chassis
[...]
* MIL-STD-810, DO-160, MIL-STD-461 qualification (EMI, thermal, shock, vibration, altitude, humidity, etc.)

==============================

- https://www.curtisswrightds.com/products/computing/systems/s...
This assumes money is the only factor and motivation.
Mercedes to accept legal responsibility for a vehicle when Drive Pilot is active
I love the fact there's 2 smaller batteries instead of 1 big one. There's a lot of people with back problems (for example my wife) and this kind of design helps them a lot. Can't wait for this to come to Poland.
Yeah I have that story in mind for the addition of !important. Might have been for Mozilla/Netscape?
Possibly to appease the Nazis in the military or their backers?

What's really weird is that up to about a month ago every person and their dog was a dangerous Nazi or Nazi enabler simply for having slightly different political opinions, but now one is a Putin supporting fascist traitor (basically a Nazi) if one does not turn a blind eye to Nazis.

Equally weird is how the west is horrible and responsible for all problems in all parts of the world due to their empires and wars and interventions and crusades and regime change, until 1 month ago. Suddenly now the west are holy saints and any questioning of their interventions and regime changes (at least in certain parts of Eastern Europe) is absolutely verboten.
If you have any sort of footprint, it's pretty much expected you'd have protective monitoring so you can articulate what these pwned accounts have actually achieved on your infrastructure.

It doesn't really matter who runs your auth service, if the auth service getting pwned results in a reportable attack, you're in for a world of hurt.

The next step is to articulate why this isn't your fault and that you did everything you reasonbly could have done to not get pwned.

Do you have evidence to support you did your due dilligance on your provider?
Poll: What kind of testing strategy do you have?
What kind of testing process/strategy do you have?

Manual, Automated, Mixed (Both automated and manual)
Only automated testing
Only manual testing
Mixed done by Dev Team
Mixed where the manual testing is done by dedicated QA
What else would they respond?
Keycloak has nearly all of this built in. You don’t need to be a crack sysadmin to set it up. If all you need is a 2FA-enabled OIDC endpoint federating to AD/LDAP to serve as SSO you can be up and running quite quickly.

[1] 2FA/Time based OTP: https://www.keycloak.org/docs/12.0/server_admin/keycloak-ima...

[2] LDAP/AD (Kerberos) https://dmc.datical.com/z_resources/images/assets/screenshot...

[3] SCIM (third party) https://github.com/Captain-P-Goldfish/scim-for-keycloak
I don’t see the logic. If what you’re saying was true, the free market would do this anyway. Employment is mathematically the same as any other commodity - mandatory price floors will make people who’s real value is lower than the market rate become unemployed.

I think evidence is important here. Look at the unemployment level of Singapore (no minimum wage). Now look at the same for Australia (high minimum wage). A great many jobs exist in Singapore that wouldn’t exist in Australia (such as people who conduct customer experience surveys at airports in SG) because it wouldn’t be profitable.

If you can give me a clear, direct, non vague, logically justified, and non conspiratorial alternative explanation, I’ll eat my hat.
I've never regarded memorization highly. Whenever we had to learn the times tables or the squares at school, I would just work them out in my head instead of memorizing them.

Of course, I still ended up learning the squares and the times tables by heart, but not because I actively memorized them, but because I just used them so much that I couldn't help but remember them eventually.

I'm of the opinion that this leads to a good rule of thumb: never memorize anything - if you use the thing often enough, you can't help but memorize it anyway.

Of course, you could argue that how often you use something isn't necessarily equivalent to how much utility you might get out of memorizing said thing, and I don't disagree with that.

All that being said, I do agree with the article's premise that an expansive knowledge base aids reasoning, which does seem to be in conflict with my principle. I definitely do possess a basic knowledge of geography, and it does definitely aid my reasoning, but I don't ever remember actively memorizing that - not at school, nor elsewhere.
There's a good point hidden in there, in the Yoda sense. Do or do not; there is no try. I.e. if you wanna join NATO, a lot more energy should be put into joining NATO and far less into talking about joining NATO.

But perhaps in real, non-armchair politics, you cannot have one without the other.
"The Roman Revolution" by Ronald Syme seems to have a very good reputation on this topic.

https://www.amazon.com/Roman-Revolution-Oxford-Paperbacks-No...
And the volume reaches its maximum at 5 dimensions.
> I suggest you try getting outside and traveling the world a bit, to get a better understanding of the large ranges of weather seen in different cities throughout the world. You'll definitely be surprised! There's hot, cold, wet, icy, windy, and everything in between.

Nice personal attack.

You have 0 info about me to say anything. You know what they say: "if you have nothing to say, just shut up". Your mom should have taught you that ;-)

> For a rare few places in the world, open air transportation could work year round. For the rest, you'll need an equally sized fleet of cars for the bad days, and scooters for the good days, than can be easily swapped.

A rare few places?

Bikes are common in South East Asia (hot, wet).

Bikes are common in the Netherlands (wet, windy).

Bikes are common in Finland (icy).

Electric bikes are starting to make even hilly terrain bikeable.

Unless population density is low, bikes + scooters + public transport can cover everything.

People just don't want to do that. That's a different story to "it can't be done!!!11!!".
To be clear, I mean to say that they are intent on misunderstanding one proposal from the talk, which is a small piece of what the talk is about. They take that one piece and make unflattering assumptions about its context -- assumptions which are explicitly addressed in the talk. If they brought evidence or experience to refute the experience of the speaker, that would be a different thing. They did not.
The Intellectual Catastrophe of Vladimir Putin
The parallel to conventional software infrastructure would be: Hire staff, or contract local expertise from reputable businesses, to build and maintain your software (probably using existing technologies rather than writing everything from scratch) on bare-metal or colo, rather than reaching for fully managed PaaS for your entire stack.

Or for comms, run a team- or company-wide chat server rather than relying on Slack/Teams/Discord.

Either you're missing my point (and maybe I didn't express myself super clearly), or you're pitching a false dichotomy.

> who has more expertise at building and running an SSO service than a company that's selling that service

OP illustrates well the consequence of that line of reasoning. I'm certain this is just the beginning as more too-big-to-fail vendors get compromised.

The cloud is just somebody elses' computer, "Move fast and break things" mean things get broken, etc.

Whenever we get subscription services for "smart security" involving cloud-connected cameras, AI-controlled locks and drones, would you also consider that as the one-size-fits all over having security guards or contracting companies like Securitas or your local equivalent?

> now you're on the hook for managing it and keeping it secure

You always were. There is no free lunch.
"List of Gravity Hills":
https://en.wikipedia.org/wiki/List_of_gravity_hills

"Gravity/Magnetic Hills Explained": https://youtu.be/-lXAeIJdxDc
Can't you say the same thing about a lot of stuff? Why outsource hosting to a third party like AWS, knowing they're the biggest target? I trust AWS a lot more than myself when it comes to securing infrastructure.
Memorization is one of God's greatest graces to the intellectual.
Fortunately many people can’t hold forever so there will still be some volume at the lower prices.
Fundamental rethinks take time. The ideas expressed by the mill folks have value independent of any specific implementation or absence thereof. Yosys is incredible and the dropping cost and increasing availability of capable FPGA dev boards equally so. I wouldn't put it past a sharp CS major to whip up a toy mill cpu in FPGA these days just based on what's been shared publicly. It's a bit strange to me that I can still see echos of the Datapoint 2200 in a modern machine.

I'd also like to see further work related to this: https://core.ac.uk/reader/161119546

There's been a lot of recapitulation and growth in the language space recently as well, showing up in languages like Zig and Rust, paving the way for better utilization across heterogeneous and many core architectures. I feel like Rust's memory semantics don't hurt the mill either, and may help a lot.
Couldn’t this be solved at the load balancer level by only allowing each running instance of the monolith to serve its own subset of the routes?

It can even be done dynamically on the fly. If the instances begin to struggle, divide them in half and see which half has the problem. Then divide that one in half, and so on, until you have isolated the problem. Then stop those requests altogether and have capacity over for all the people desperately hitting F5.

So now you have both DOS resilience and independent scaling, all without requiring any changes to the architecture or knowing in advance exactly what you should have factored out into its own service.
What browsers does it work on? It just shows a white screen on iPad.
Well, Russia is bad, there is no denying that. I might go as far as to say "US good", in a black and white picture of the world suitable for 6 year olds. But the world is not black and white, it's all shades of browns.
Well, for this missing scenario, public transport in theory would help.

However there is a strong lack of will for it in many places.

In many others the population density doesn't really allow it.

As usual, it's a mix of things, just that the current default of "cars everywhere" should be turned on its head. It should be: "no cars everywhere, and then introduce cars where they are actually needed".
Very much agreed. The same is true for Laptops, by the way; I don’t nearly care as much about thinness as battery life / CPU speed.

I’d even go as far as saying that even with Apple’s efficiency and all, I’d still prefer it if they had bigger batteries.
Utopia now: Why the utopian vision of William Morris is now within reach
> the introduction of electrical fans into the picture becomes the next obvious thing to watch for

How is that in any way obvious? I don't see any connection, like at all. The furnace does not vent into the room.
For the eMMC, quite probably.

The BBB Rev B BOM lists a Micron chip that tops out at 30MB/s read and 6.6MB/s write (pretty close to measured).

The BBB Rev C BOM lists Micron chips in that range but also lists chips like the Kingston EMMC04G-M627 which is capable of 250MB/s read and 25 MB/s write.

This link seems to indicate that the Rev C is around 2x faster on eMMC.
https://www.tablix.org/~avian/blog/archives/2017/08/beagleco...

(the RPi Zero numbers seem to correlate with yours so it seems you are measuring the same things)

So, the eMMC numbers are going to be highly specific to the board manufactured.
To add to the other comments this also assumes trust in the employer. If you’re disgruntled and don’t trust your employer than this policy falls flat.
The (forgettable) film Crash with Sandra Bullock won Best Picture in the mid-2000s... but it's mostly (for the first half or so) a sanitized, watered down, far less daring or interesting version of Magnolia, which is an absolutely brilliant film.
The cognomen was inherited. That is why the "Caesar" name passed to his adoptive son.
Ask HN: Where is the update from Okta on the breach?
It is normal for a provider to not have shared and update over four hours after a suspected security breach is exposed on Twitter?

The lack of any communication from Okta seems odd.

Okta's status page - https://status.okta.com/
Okta's trust page - https://trust.okta.com/
Twitter account - https://twitter.com/okta

Disclosure: I work for a company that uses Okta for SSO but I'm not involved with the administration of the Okta instance.
Other boards are easier to find. As an example, over 18000 Beagleboards should arrive at Mouser by the next months, of which over 2500 are expected by tomorrow. TME.eu also have some ARM boards in stock, etc.
> This assumes money is the only factor and motivation.

Only if you assert that it is only useful if it solves 100% of the cases.

There are other motivations, but money is a big one. If you could block X% for a large value of X (I'd say easily > 50) then you're better off than before, even if some insiders driven by other motivations still remain.
You could double the battery size and still only have one day of light to medium usage. Battery optimization especially in idle is important.
In the process of an interview I'd also like to learn something about the company and the job. Such practices require a substantial upfront effort from the candidate without them learning anything about the job they are applying to.
Ambulances are a potential problem, true.

But even for ambulances, if you couple traffic calming measures with bike lanes, better public transport, etc, car traffic goes way down, which means that ambulances aren't stuck in traffic. So even ambulances can slow down a bit before speed bumps and they would still arrive faster than otherwise.
Because when the original thing didn't work as intended (with which we were pretty sure, otherwise we'd never done it cause of the risks) then the kill switch will work 100% as intended for sure, and also have no unexpected side effects?
Yeah that's a fair point. As much as I badmouth Google in other areas like product longevity, I don't usually laugh at their security related offerings and initiatives.
Krueger’s study was highly flawed. What it amounted to, was, as one economist put it, attempting to prove that water flows uphill, by looking only at the upward movement of water in a rapids. It’s politically correct, feel good nonsense. Just because you’ve found an exception does not nullify the rule - as in chaotic systems, sometimes water does flow up hill. But economics solves this issue by studying the underlying forces.

I think of the economy as a biological extension of our species. Any attempt to control or regulate it can only result in inefficiency (beyond the obvious maintenance of contracts and outlawing of violence).

Another way to look at money is as analogous to energy - and like with energy, it cannot be created nor destroyed (which is different from growth of the economy as a whole due to innovation). So any time you see a policy which appears to “create value” by shifting it around, will create slightly more losers than winners, if you take a holistic view (eg, increase cost of labour, decrease comparative advantage and decrease spending on research and development).
You could not be more wrong here. Government entities have far less privacy than any non-government entity.

You can FOIA every email of most government employees. You can even FOIA IRS records.
I was reading an article that also seems to indicate that dumbphones are making a bit of a comeback: https://www.bbc.com/news/business-60763168

And those are a lot thicker. Maybe Librem should not try to compete with Android and iOS at all in terms of design and just go for “privacy by default” as their campaign. (If they ever sort out delivery problems)
There are verified occurrences of gluten intolerance, squashed babies of drunk parents, and listeria contamination of raw fish. I agree that it’s not wise to let oneself be scared by incidents with low occurrence. But how is it unsubstantiated?

(In my family we do practice co-sleeping, but without any alcohol involved; and my wife never had sushi during pregnancy because listeria are rare but really bad for the fetus.)
My guess would be getting the phone out and logging in to some app to order the next two batteries. With a bunch of animations and key presses. And ofcourse some "I agree" buttons.
> One way to get around this would be to decrease bucket size by increasing the FFT size.

A better way is parabolic interpolation, which is in the source code but not mentioned in the article - and that works for finding the fractional position of peaks in the FFT or in the autocorrelation.

An even better way is by comparing the phase of the peak in two successive FFTs: If the signal phase has changed by X degrees after T seconds, what's the nearest frequency to the bin centre that can be true for? (this is the main thing a "phase vocoder" does)
Interesting. Let's see how this plays out for them.
So I guess my example resembles some form of structured concurrency but the threads are not encapsulated in the parent's closure. I still need to structure my promises and await / async logic to deal with the edge cases and make sure the program doesn't get stuck or leave threads hanging. That makes sense, thanks.
That appears to be a pretty comprehensive list but it's missing Northern Michigan's Mystery Spot:

https://www.atlasobscura.com/places/st-ignace-mystery-spot

Went there as a little kid. Most folks touring were a bit scared by it. I viewed it as a magic trick and wanted to figure out how they did it.
Putting your money where your mouth is, is probably the only way to obtain acceptance for semi-autonomous driving systems.

I imagine airplane manufacturers have long been on the hook if their autopilot engages Kill All Humans mode, despite the best efforts of Boeing's lawyers to blame some of the humans their software killed.