skysight-inc/HackerNews huggingface dataset:
Sure. So how many published works do we ever see the git logs for? Significant literary works, one or two per author, pre digital era. Galley proofs, or Marcel Prousts chaotic revisions which G Scott Moncrieff fought with doing his translation, and then Terence Gilmartin. Dickens, some of them. Most writing? Never seen.
I expect 1 * m = 1m, and 1 * m * m = 1m because applying a unit doesn’t inherently have a value of that unit associated with it. (1 m) (1 m) obviously equals 1m^2, but ((1 m) m) is not the same expression.
Any word on whether this affects Auth0? The company were bought by Okta last year but I don’t imagine they have consolidated everything yet so I’m hoping our Auth0 tenants are unaffected
But Okta is just hosted SAML or OIDC. The same can be achieved with self-hosted Keycloak.

In fact, a third-party’s “Okta integration” should work out of the box with Keycloak or any other IdP.
> Very sad to discover that this is NOT a ready made component to display actual trees. What a deceitful name!

Hey, since you get to decide the structure yourself, I’m sure you could use that to draw a real tree using SVG.
It's a developing story, click back to the article and there are more details now, including the name of the Okta official that made the statement:

WASHINGTON (Reuters) -Authentication services provider Okta Inc is investigating a report of a digital breach, the company said on Tuesday, after hackers posted screenshots showing what they claimed was its internal company environment.

A hack at Okta could have major consequences because thousands of other companies rely on the San Francisco-based firm to manage access to their own networks and applications.

The company was aware of the reports and was investigating, Okta official Chris Hollis said in a brief statement.

"We will provide updates as more information becomes available," he added.

The screenshots were posted by a group of ransom-seeking hackers known as LAPSUS$ on their Telegram channel late on Monday. In an accompanying message, the group said its focus was "ONLY on Okta customers."

Security experts told Reuters the screenshots appeared to be authentic.

"I definitely do believe it is credible," said independent security researcher Bill Demirkapi, citing pictures of what appeared to be Okta's internal tickets and its in-house chat on the Slack messaging app.

Dan Tentler, the founder of cybersecurity consultancy Phobos Group, said he too believed the breach was real and urged Okta customers to be "very vigilant right now."

In an email, Tentler added, "There are timestamps and dates visible in the screenshots indicating January 21st of this year, which suggests they may have had access for two months."
I remember being told more often than I can count that it is nest to leave stuff like this to the experts who all day long do nothing else.

Like actually being told that as reason to use Microsoft AD. Or the nobody is better dealing with spam than Google (when I was at a G Suite company). Or never to roll your own security library.

All these were in the same ballpark and in some occasions the latter one was used to drive home the others.

I am not sure what to do/say about it.

I am not (by trade) an IT person but hopefully learned a bit in my time. Trying to understand how all the different tools on my corporate device work (together?) to enhance security is impossible to me. I can't name them but from anti virus, to compliance checking to additional compliance checking by VPN software to endpoint monitoring to remote install capabilities to windows management to remote desktop capabilities and many more.

To me this sounds like too many potential attack vectors waiting to be exploited.
We use a Supercapacitor UPS hat to supply enough power for a controlled shutdown due to concerns over SD card corruption (you get around 1 minute). It's been reliable on systems that regularly lose power over a period of around 5 years. The hat we use (Juice4Halt) is more expensive than the SBC though, so that is probably a non-starter for a lot of people.
List of Wars: 1500–1799
It still raises the bar for the attacker. Now they explicitly need to seek out and target the company. Even if breaking into any single company might now be easier, breaking into all of them is much more difficult than if they used a single point of failure like Okta.
> Now think for a moment, can you construct a sentence that is at all logical, that doesn't move the goalposts or do any linguistic trickery, that could possibly describe where our universe came from? Don't worry about it being true, just a reasonable sentence that obeys the laws of cause and effect?

Mathematical realism ala Tegmark's level 4 multiverse is a concrete example; if mathematical consistency causes existence then the big bang and our universe have a definite, understandable cause.
> They either get yelled at or saddled with a bunch of homework because they've drawn attention to a can of worms and are being deputized to fix four things instead of the one they knew about.

There is a gradient I've seen with IT workers in general, that is doing IT as a passion and doing IT for a job. Disciplining someone for not knowing enough though is a bit much.

> real problems start when the complaining ends

By this point no one cares anymore and the technical debt is beyond fixing.
Wow that reads like dystopian science fiction, not sure why!
Apparently Plaid has 40% penetration of US bank account holders[1], and of course their entire business is storing the username and passwords for all those accounts so they can screen scrape. I struggle to think of a more attractive target than that!

[1] https://www.thediff.co/p/plaid-data-layer-to-payments-layer
Precisely. In some narrowly defined scenarios where data migration is otherwise like untangling a giant ball of yarn, RPA serves an invaluable need. However, the manner in which it is marketed is out of proportion to the narrower scope in which it is valuable.
They (lapsus) also mentioned that the account was blocked in their "announcement" of this in telegram:

> yes we know the URL has a email address. the account is suspended - we dont care
Serious question looking at the Okta site.

Does Gartner have any credibnility other than being a pay to be endorsed shill?
They are simply looking into it. Not offering unwarranted speculation or conjecture. Not providing any information that could assist attackers. And not being unreasonably dismissive, nor downplaying it.

I really don't see the problem with their response. What would you propose in the circumstances?
It's not just that. The most important part of Okta is the directory integration, not the SSO part. For small companies that have never acquired anyone, it doesn't matter.

It also makes user lifecycle someone else's problem. Very important. As a medium and larger sized company, when you have to tell your customers your homegrown IAM was pwned, you're in for a world of hurt. When you're just in the boat with everyone else who got popped, it's an easily recoverable incident.
Do you have some evidence that those with prior infection would be better off with a different dosage?

Few have serious adverse reactions unless she is describing feeling ill for a day as a severe reaction. If she is unable to take needed preventative measures wouldn't it be more reasonable if they hired someone who can?
It's also a marketing problem. You need a solution that appears sexy to the worker, the boss and a champion high enough in the organization to overrule outdated IT policy.

I think RPA exists because every organization is plagued by people management problems that developers and IT often fail to acknowledge.
How do you design for and validate "rugged"-ness? Are there standardized tests?
SR-IOV Support for Intel Iris Xe Graphics on I7-1165G7
Not sure what you mean by higher kinded monads but hooks are kind of like dumbed down Arrows.

You'll see some similarities with the haskell libraries auto and netwire.

I'm not a fan of the pure JS implementation the react team did, I wish they went the compiler way like solidjs did.
It results in an API that is close enough to react and works faster and without gotchas (or hooks rules).
If a repo needs to be broken up for performance or organisational reasons, is there really a reason to prefer to integrate the parts as microservices rather than as libraries?
Should end users be worried about password breach or something like that?
I mean in relation to each other, Germany and Russia.
Learning about personality traits and how to connect with different types of people, can be very useful in becoming better at communicating with others on a team, your boss, different types of managers in different roles, etc.

Learning sales strategies and principles is way more useful than it sounds like it would be. Engineers don't want to hear this, but all individual contributors have to sell, at one time or another: you sell your ideas and approaches to solving problems (so the boss/team will understand and agree to your ideas), because you want the right thing to happen with the project you're working on.
You sell yourself when interviewing for jobs. Sales techniques even help with dating, to help you understand what wrong things people sometimes say, and how to say things in better ways that have the same meaning. Learning more about selling would have come in very handy earlier in my sw dev career. It also sets you up better if you ever decide to branch out on your own and start a business of any kind. Selling has a lot of technical details to it, more than you would think. It's not just simple and 1-dimensional and thus ignorable, like I imagined when I was getting my CS degree so long ago.
No I don't think so. It wouldn't stop the PC from booting up. Also, the scenario is different here. What will happen if you took two identical HP systems and swapped their disks?
I see that other commenters are intent on misunderstanding this, which is a shame.

Or perhaps they just disagree?
We have a similar thing in Vietnam with Vinfast scooters. However, in practice, it doesn't work very well.

You rent batteries from Vinfast for your scooter and then, supposedly, can swap them out at a variety of Vinmart convenience stores or Vinfast dealers. The problem is that very few Vinmarts participate and the number of them seems to be shrinking. I've also been in a situation where they are simply out of batteries to swap.

And then on top of all of that, the types/shapes of batteries differ between scooter models.

That said, I love my scooter but I definitely don't bank on the battery swap stuff.
+1 for The Gay Science.

And I would add Thus Spoke Zarathustra.
And when it's been over 5 years?

What about talking about things from 10 years ago, or 15?

The grandparent post is wrong but if OP is being accurate about "wish I could" then the NDAs or severe expectations of not talking are going way too far.
wow, just imagine typing okta.okta.com all day.
Perhaps the app was not compromised, to begin with. Hackers might’ve gotten into the build infrastructure of the app, rewrote it to make it compromised, and then all the users of that app are now compromised.

Lesson: ask your (in this case Microsoft) employees to not use work computers for any personal use.

/me goes to check if my password manager company uses Okta.
So unfortunate banks haven't implemented SSO and fine grain access control after all the years.
the point is it should never been in css in first place. and css works better without it. I think he is frustrated because nobody takes the time to understand the cascade
Provided the author <is> constrained by the facts, that's a perfectly reasonable position. If he ignores facts unhelpful to his view he'll be seen through by astute critics.
Excellent article, aggregation can also obfuscate problems with sensors (for example, weird quantization or duplicating points). It is useful whenever you have high frequency time series to look at the data points for the highest resolution possible for short segments of few data points.
Also, heating energy consumption is among the top usages. So switching from gas would require large increase in electric generating capacity.
> So you're suggesting that for a sovereign power to consider joining NATO is "flirting irresponsibly".

This was indeed quite irresponsible of Ukraine, as we can see: they are now at war with Russia without any real support from the side they were negotiating with (USA / NATO have not and will not deploy to protect Ukraine). The losses (ref. the refugee count, loss of territory) have already been deeply damaging to Ukraine and its future: they were already aging, female dominated population prior to this with very bad economy. I cannot call this behavior responsible in any interpretation; and if these are sovereign actors then the armed veto is legitimate tool in order to pursue national interests.

> Lithuania, Latvia and Estonia are all NATO members (that happened under Putin's first stretch as president).

I think the total number of tanks Baltic states have is around 0; Russia has something like 12,000+. Ukraine has the second largest army in Europe after Russia. Russian govt. probably considers (at this point) it a mistake to not intervene in the Baltic NATO process though.

> If Russia wanted to maintain a NATO-free buffer around its borders, what lesson do you think attacking the country that isn't a NATO member sends to the others?

From the point of view of Russian strategical behavior & deterrence something had to change in the way Russian govt. behaves to stop the further expansion into Ukraine. Clearly, whatever calculus they used previously for strategical deterrence was not enough to stop the expansion (hence, the expansion towards Russia over time).
No FP yet - that's about half (adds and multiplies) done - but no reason why not
Acquisitions get authentication replaced fast (well, fast-ish, we got a year to change over). It might be around somewhere, but, AAD is used nearly universally and I've never seen Okta.
A FOSS tablet/phablet-sized device with no phone/SIM functionality would be great. Discard the camera too.

It would reduce the complexity and price. I can’t recall the last time I really needed to make or take a “phone” call. That shit’s legacy now.

Just give me all the messaging apps and a good browser. Perhaps a clamshell design with a physical keyboard.
anwser: Zelensky, same guy that is drafting about half the adult population of Ukraine in an attempt to maximize the bloodshed.
Lee Cronin talked about some of this on the Lex Fridman podcast recently.
It's always interesting to hear people think they have rights on corporate networks.

It is a complex issue with entry of nuance I'm too tired to thumb type. I know there are lines that shouldn't be crossed. But it is so naive to think companies shouldn't have an eye on their data.

Do you think banks shouldn't have cameras in their lobbies? Or that tellers can walk in and out of the vault with black bags and no one ask what's inside?
Or as we call it,in infant school "rote learning" which incurs a huge penalty in popular opinion, despite driving recall of basic arithmetical facts like the times-tables, alphabet order, spelling "rules" &c
not really. that's the purpose of css
Eh, there's plenty if you look. For example, most people have strong opinions about the health effects of food (fat, sugar, oils, processed/unprocessed, gluten, you name it), which are mostly unsubstantiated.

Pregnancy and childbirth is another area that's ripe with (literal) "old wives' tales". I read both Japanese and English advice on the topic, and it was both hilarious and disturbing to see completely contradictory recommendations like "eat healthy food, avoid sushi and caffeine at all costs" and "eat healthy food, like sushi and green tea". Another good example is co-sleeping, which the rest of the world considers obvious but in the US is considered outrageously dangerous, mostly because some studies found that adults who are {morbidly obese, drunk, on drugs} occasionally squash their babies.
You mean you expect GSuite to fall at some point? Could be, I don't have good insight into Google's internal security posture these days.
Again, this is not related to an Okta hack, employees could be using an app that has nothing to do with Okta and be compromised through this same attack vector.

This is just wild speculation to make up a scenario where Microsoft could be affected by the Okta hack with no evidence to back it up.
Ain’t that idea of the Open Banking standard?
Interesting. I wonder how much it gets used. That said, my contractor work was pre 2014, so yeah sounds right.
A typical opsec issue in many companies even to this day is doing ssh shell access to critical systems and doing so with ldap passwords or user-controlled authorised keys and without 2FA and without host key verification. There are trivial browser based local network attacks to gain reverse shell access with such setups. Just because those systems are behind firewall and VPN, people tend to falsely believe they are more secure.
The US military has standards, though I don't know which, if any does this product try to meet/comply with:

MIL-STD-167: is a test method standard for mechanical vibration of shipboard equipment

MIL-S-901D: is a Navy test specification for shock to simulate explosions in the water next to a ship or submarine.

For the curious, you can grab PDFs at: https://cp-techusa.com/knowledge-zone/military-specification...
Having seen both, Ordinary People is definitely the better movie.

Goodfellas vs Dances With Wolves: A tie. Sorry, there really are people who really liked Dances With Wolves. I myself saw it again after over 20 years recently, and it's still great in my older age. Most of the criticism I've seen of it is flawed. From an artistic standpoint, it beats Goodfellas hands down - but Goodfellas is much more entertaining.
Fact Sheet: Act Now to Protect Against Potential Cyberattacks
I'm just leaving my first job because - among other things - I really start dreading adding business features to a 20 year old huge monolith riddled with terrible code and even more terrible OOP inheritance roller coasters of madness - up, down, up, up, down, up, down ... who thinks this has anything to do with good abstraction wtf? - It certainly doesn't help that the company has a "it always worked so we will never change" kind of attitude towards absolutely everything.

Currently, I couldn't be more excited to start my new position in which I'll be responsible for speed, reliability & security of millions of cloud transactions in a microservice backend.

That being said, let's see how I feel in 6 months. Experience need to be made by oneself.
With minor adaptations due to some api changes, yes. This is the beauty of the web!
I also don't like most of the websites design, many time I have to fix it in custom CSS.

I recommend Gemini: https://gemini.circumlunar.space/
that would make css uncoherent
Well, the truth is that developers often underestimate how hard it is for non-developers to write scripts. The reason why they don't understand why something like RPA exists is also known as 'The curse of knowledge'.
That reason is not performance but familiarity and ecosystem.
A trendy way in gaming to build games is to use ECS which is FP and there are very performant framework to do ECS.
In October 2020 I did a deep analysis on commercially supported and/or hosted Kubernetes distributions and platforms (think Rancher, OpenShift, Tanzu, EKS, GKE, etc.) and after doing most of my analysis, a Gartner report found its way to me. It largely matched my results with some skewing for factors I don't consider as important, but, were clearly explained in the report.

So, while I realize this is a small data point, it is one backed by quite a bit of data/analysis. Their report was well reasoned and accurate given the stated priors.

I would say that their credibility is fine so long as you read the reports fully and not simply glance at their magic quadrant figures.
I think that microservices is a good approach that was demonized a few years ago due to there were companies that did not separate the pieces correctly.

The main cons that you can find are the sync work between teams ( here is the hard work, if you separate in little pieces you can cause that teams need more sync effort ) and devops effort.
Better Place, the electric car company that was launched in Israel with Renault was doing that. You could charge at home or go to a station and have your battery swapped in minutes. I think they did that mostly to make sure people will always know they can charge quickly and not waste time in a station for that.
That's generally true but the thing about Microsoft is that it's so huge I wouldn't be surprised at them being customers of a lot of SaaS offerings. Could be via an acquired company that is partially integrated? Or some kind of federated login for partners.
Jumpcloud seems to work quite nicely.
I would love to see a unified model for batteries for e-scooters. It will save so much battery waste for everyone.
It's a problem according to the author. Both the lack of an official API for the latest iteration of context menus and existence of older UI artifacts are presented as "paper cuts" and disorienting.

I'm not stating whether it's a problem or not, just iterating/expanding on what the author have said.
Suspended, but then Okta doesn't tell the world they were breached isn't a great look.
Interesting that you mention GSuite/Google.

I don't remember Google having any large-scale security incidens.

Have they been better at playing down their security incidents or are they doing something very right that the rest of the industry can learn from?
I won't call a film a ripoff unless it adds nothing to the world which wasn't given by the original.

Pi clears this bar easily. Sure, shooting 16mm off the hand, with oversaturated, Expressionist lighting, and some of the body horror (or did they both "rip off" Cronenberg there?) approaches homage. If one has seen Tetsuo first, there's more to appreciate.

But Pi is an excellent movie, which carries its own themes gracefully, Aronofsky made his reputation on that film and deserved to. The soundtrack was also groundbreaking.

If we were to adopt your idea of what constitutes a ripoff, the result would be more bland and defensive cinema, the kind where the script may as well have been written by the studio's attorneys.

So let's not.
!important is the new <blink>
Newer PIs can boot from the network, in case you need to put new code on because the current code doesn't boot... and you could use the network to fetch data as well. Maybe not as convenient, maybe more convenient, depending.
consult an outside company to do the work for you

Maybe a company that specializes in this kind of thing? Like Okta?
I find it hard to believe as I had the opposite experience

Next has amazing docs and sane defaults: it's the only way I would touch react.
That's part of the equation.

In a B2B setting you get rid of a LOT of paperwork and due diligence by just saying "We use Okta for X, Y, Z." Hell for SOC2, Okta got rid of a shit ton of verifications for us at a critical stage of the startup I was leading, Papa.

Sure you can build your own but at that point you're wasting months for zero customer benefit. You could be building product. I don't know what the right answer is.
There are standard battery sizes/specs for small devices, it makes sense here too.
IMHO, attempts to show literate programming on screen are doomed to meet with mediocre success. DEK invented literate programming with printed books in mind. I dare say that the only successful literate programs are books printed on paper.

First, in a printed book, it is easier to find a previous page and compare a fragment on it with the current fragment. Second, a printed book has no links tempting you with the words "CLICK ME" to disrupt the flow so you can read it from cover to cover with fewer distractions. Third, anecdotally, I can see flaws much easier on a printout than on screen, both in programs and in texts.