skysight-inc/HackerNews huggingface dataset:
That's a rather newer definition. The concept has been around longer than the name, which is why I mentioned Neptune. The original definition was literally anything where the presence is puzzled out from its gravitational attraction instead of than its luminosity. Hence why MACHOs (MAssive Compact Halo Objects) were under consideration for being dark matter. They would consist of brown dwarfs, planets, and the like. They are currently out of vogue for not supplying enough gravitation, but that matter had no special properties to it. Not exotic at all. You can look this up.

I sort of feel the frustration here of people on Wikipedia trying to correct something they actually know about.
You can use the Cleaner API instead. It's pretty straightforward to use.

https://download.java.net/java/early_access/jdk18/docs/api/j...
He did say: What we found is that even in people who did not have any heart problems start with, … —COVID-19 affected them in such a way that manifested the higher risk of heart problems than people who did not get COVID-19.

That doesn’t imply that COVID caused damage directly, it could have done something else and that something else caused damage. But that still means COVID started a chain of events resulting in heart damage.

Why would SARS-CoV-2, the virus that causes COVID 19, which we all thought about as a respiratory virus, attack the heart up to a year down the road?
If they can provide better anti-forgery protections then why not?
OP says "released since the 90's and beyond," earlier in the comment.
First, the study does not even use the term "mild". They did look at three levels of severity: non-hospitalized, hospitalized, and admitted to ICU. The "non-hospitalized" group surely includes people who would describe their case as "worse than any flu", as well as those would describe theirs as "mild" (e.g. a few sniffles for a few days, like a number of my friends recently.)

Second, the hazard ratios differ widely between the three levels of severity. For example, for MACE (major adverse cardiac events) versus the contemporary control group, hazard ratios are:

Non-hospitalized 1.26
Hospitalized 2.41
ICU 4.36

One would expect a similar gradation of risk by severity among the "non-hospitalized" group.
This discussion immediately brings to mind all of the iOS apps that become completely unusable the day a major iOS update is released, and then take a week to fix.

I get that not everyone has spare time and energy, but it doesn't take that long to grab a beta, put it on a device (or load up the simulator) and find out. Leaving it until the last minute just forces you into a panic, and seems irresponsible when you had months to just test your product.
See also https://marc.merlins.org/linux/talks/ProdNG-LinuxCon2013/Pro... which has some interesting history and context from that time.

In paper form (more gory details): https://www.usenix.org/system/files/conference/lisa13/lisa13...
Many just invest ("hodl") in bitcoin, is that inside the 1%?
Sviatlana Tsikhanouskaya appeal to Belarusian soldiers:
https://youtu.be/b8mNVYEmlg8
Yeah, indeed. Not rocket science. I use a Mac all day for work and productivity. I play games sometimes on a PC. And as it pertains to games, I personally care way more about resolution and image quality than I care about frame rates exceeding 60hz, which is why I am super grateful to have this display and a beefy GPU that can easily drive it at native resolution at 60hz
Does it matter? You couldn’t pay me enough to dine with a known white nationalist and I certainly wouldn’t be sending any thank you notes as a follow-up. I can’t imagine I’m unique in this regard.
Dan Luu wrote an essay on this topic recently: https://danluu.com/nothing-works/

He ponders why it is that big websites inevitably have kernel developers. Way out of their domain of expertise, right? If you adopt a technology, you're responsible for it.

When Kubernetes inevitably has an issue that is a blocker for us, I don't have confidence in my ability to fix it. When an internal python or shell program has an issue that is a blocker for us, I change it.

PostgreSQL is used by probably millions of people, but we've had to patch it on multiple occasions and run our fork in production. Nobody wants to do that, but sometimes you have to.

The point is, you can't just say "oh, we use kubernetes so we don't have to think about it". No. You added it to your stack, and now you're responsible for it. Pick technologies that you're able to support if they're abandoned, unresponsive to your feature requests and bug reports, or not interested in your use case. Pick open source, obviously.

This is another reason I like Nix. It's a one-line change to add a patch file to a build to fix an issue. So I can contribute a fix upstream to some project, and then I don't have to wait for their release process, I can use the patch immediately and let go of it whenever the upstream eventually integrates it. It lowers the cost of being responsible for third party software that we depend on.
Ooh, I'd forgotten about the wrapper scripts.

And yeah, the other thing that made it work, I guess, was having the machine image be very minimal, very tightly controlled, and very infrequently changed - so you didn't have to worry about things changing all the time due to the upstream distro.
You can find so many modded versions though...
IANAL but this definitely seems like a breach of Art 33 of GDPR as it meets the criteria of involving personal data (list of users was exposed) and the 72 hour window has passed.
> If that service is compromised, it doesn't really seem to matter how?

I hear what you're saying, but the how does really matter, and will change how customers perceive the issue and make decisions about how to react.

e.g. "databases were open to the Internet and all data has been siphoned" lands quite differently than "a staff member abused their privileges but the scope of abuse was limited to xyz".

If I'm a customer, it tells me a lot about what Okta needs to do next, and how much I should freak out right now. It's still extremely problematic that a staff member (1st or 3rd party) could abuse such privileges, and I immediately have questions about how those privileges were abused and to what actual effect, but it's a fundamentally different problem than other types of breaches.
There is a type of person who can only reply with "smart people can do bad things" when discussing competence in any form.

But there are only so many ways you can say "smart people can do bad things" without sounding repetitive, and it looks like they're scraping at the bottom of the barrel.
Most of these are not scammers trying to scare in the name of tax authorities or IT support scammers. They are mostly tele-callers trying to sell property, insurance, loans, credit cards and such. Nuisance nonetheless.
Intel is using generation numbers in their marketing materials. In the technical-oriented slide decks you’d see things like “42th generation formerly named Bullshit Creek” but they are not supposed to use that for sales. And then actual part names like i9-42045K.

We keep using code names in discussions because the actual names are ass backwards and not very descriptive.
Birdfeeder: Twitter bookmarks in your inbox (once a week)
Systems Methodology in a nutshell.
Made a little mistake (can't edit). CASL is Canada's Anti-Spam Legislation and not Canada Anti-Spam Law.
My surpise isn't directed at Android, it's at Purism for releasing a product with such poor battery life.
You see these same pitfalls in much of the medical device industry. Often hospitals and their weird political internal workings drive reasons for things, and not quality or efficiency of care, care for their workers, etc. You see this present itself af far up as to help choose a certain technology development path for an entire industry based on these non-real internal hospital dynamics and intrenched ways of doing things, and billing for them rather than working to improve quality of care or outcomes.
The Future Fund – Future Fund
The bots ensure that steps are taken such that scares goods are distributed in a manner better than "whoever can pay the most".

RPis have, and will continue to be, aimed at education and enrichment, and the makers/retailers will take steps to ensure that as many people as possible can get ahold of them at a low price.
100% right, we are working on a cloud edition that we hope to release soon. That said, their are a lot of use cases for self-hosting, and its also very cool to be able to deploy something as massive as this on your own localhost with a single command.
I agree! The models will definitely keep getting bigger, and MoEs are a part of that trend, sorry if that wasn’t clear.

A pod of gen2-H100s might have 256 GPUs with 40 TB of total memory, and could easily run a 10T param model. So I think we are far from diminishing returns on the hardware side :) The model quality also continues to get better at scale.

Re. reading material, I would take a look at DeepSpeed’s blog posts (not affiliated btw). That team is super super good at hardware+software optimization for ML. See their post on MoE models here: https://www.microsoft.com/en-us/research/blog/deepspeed-adva...
what does dolphined mean. is this a cyber security term?
No, I won't. Piping is a nice way to compose programs. I like that, just use shell check and proper settings.

I usually go to python or some other scripting language when I have a lot of string processing to do. For the rest something with a more advanced type system. Scala, rust and the like.
This is cool from a developer perspective.

I put my ganer hat on looked at their old demos. Demos always look great. I'll believe it when I see it in gameplay footage.
It's just oauth totp. You can use whatever 2fa authenticator you want. I like the one built into BitWarden personally.

Authy works fine too (there is a good authenticator app that is actually called Authy)
I worked at (massive live-streaming website) and my ops team operated tens of thousands of bare-metal machines. Not to say we didn't have an enormous amount of containerized infrastructure in AWS, but we had both.

When the company was younger containerized networking had latency and throughput issues, especially when you were trying to squeeze every bit of traffic you can from a white-box bare-metal server, i.e. bonding together 10Gb or 40Gb network interfaces. The other thing is that the orchestration engines like K8s simply had maturity issues when not using Cloud Load Balancers.

As for the implementation details, I've worked at lots of companies doing metal and they look a lot alike. PXE and TFTP, something like Chef, Puppet, Ansible (But at a certain scale you have to transcend those tools and come up with better patterns), you need services to manage IPMI or console servers, power strips, etc., you need a team of folks to rack and stack things, you need inventory, you need network engineers, and so on. At a certain scale you can simply push code around with SSH and a build system, at a scale beyond that you need to come up with some special sauce like P2P asset distribution or an internal CDN. At the pinnacle of bare-metal, you'd ideally have a very evolved control-plane, a slimmed down OS that runs a single static binary, and a stateless application. It takes a lot of work to get there.

Of course, getting servers to run some code is scratching the surface. Service discovery, network architecture, security, etc., are all things that require specialized skill sets and infrastructure. You also need to build and maintain every "glue" service you get from a cloud provider, you need to run file servers, you need to run repositories, you need to run and manage your own databases, and so on. Sometimes you can hybridize those with cloud services but that opens up yet another can of worms and teams of people who need to answer questions like.. what if The Cloud(tm) goes down? What if there's some kind of split brain scenario? What if there's a networking issue? How does service discovery work if half of the services disappear? etc. etc.
My mind was blown out the back of my head the first time I saw Super Mario Bros in an arcade in 1986-7. I wonder what would have happened to my sanity if someone had shown me a modern game one minute later.
And even if vendors does say they have it, or can get it, it ended up taking us 4-6 months before systems were online.
Au contraire, it just predicts a new thing. Viggo Mortensen as Batman.
I always thought Otter was just a mobile browser! Thanks for sharing! I love hearing about obscure browsers!
I feel like the terms "subtitles" and "closed captions" are interchangeable in this instance
Reply from Lapsus$ on Telegram:

I do enjoy the lies given by Okta.

1. We didn't compromise any laptop? It was a thin client.

2. "Okta detected an unsuccessful attempt to compromise the account of a customer support engineer working for a third-party provider." -
I'm STILL unsure how its a unsuccessful attempt? Logged in to superuser portal with the ability to reset the Password and MFA of ~95% of clients isn't successful?

4. For a company that supports Zero-Trust. Support Engineers seem to have excessive access to Slack? 8.6k channels? (You may want to search AKIA* on your Slack, rather a bad security practice to store AWS keys in Slack channels )

5. Support engineers are also able to facilitate the resetting of passwords and MFA factors for users, but are unable to obtain those passwords. -
Uhm? I hope no-one can read passwords? not just support engineers, LOL. - are you implying passwords are stored in plaintext?

6. You claim a laptop was compromised? In that case what suspicious IP addresses do you have available to report?

7. The potential impact to Okta customers is NOT limited, I'm pretty certain resetting passwords and MFA would result in complete compromise of many clients systems.

8. If you are committed to transparency how about you hire a firm such as Mandiant and PUBLISH their report? I'm sure it would be very different to your report :)

_________________________________________________________________________________________________________________________________________________________________________________________________________
https://www.okta.com/sites/default/files/2021-12/okta-securi...

21. Security Breach Management.
a) Notification: In the event of a Security Breach, Okta notifies impacted customers of such Security Breach. Okta
cooperates with an impacted customer’s reasonable request for information regarding such Security Breach, and Okta
provides regular updates on any such Security Breach and the investigative action and corrective action(s) taken. -

But customers only found out today? Why wait this long?

9. Access Controls. Okta has in place policies, procedures, and logical controls that are designed:

b. Controls to ensure that all Okta personnel who are granted access to any Customer Data are based on leastprivilege principles;

kkkkkkkkkkkkkkk

1. Security Standards. Okta’s ISMP includes adherence to and regular testing of the key controls, systems and procedures of
its ISMP to validate that they are properly implemented and effective in addressing the threats and risks identified. Such
testing includes:
a) Internal risk assessments;
b) ISO 27001, 27002, 27017 and 27018 certifications;
c) NIST guidance; and
d) SOC2 Type II (or successor standard) audits annually performed by accredited third-party auditors (“Audit
Report”).

I don't think storing AWS keys within Slack would comply to any of these standards?
From Software has such a neat way of story telling in their games. Cutscenes are far and few between, and the ones that are there really don't tell much story (aside from intro cinematics/game endings, which only give a high-level rundown of the world)

Instead, information is drip-fed to you through NPC dialogues, item/spell descriptions, and level design. Meaning you'll probably pick up very little of the actual story as you play the games, and it's something of a community effort to put the pieces together and figure out what's going on. And even with all that, there's still tons of gaps that can only be theorized about. It really makes the games feel like they take place in a huge world with tons of history that's much greater than you, the player character. The world doesn't seem to care about you at all, you're just an observer of a much greater story.

The creator of the games, Hidetaka Miyazaki has credited this vague style of storytelling to him reading fantasy novels as a kid, without a good understanding of English. There would be parts of the story he didn't really understand, so he'd just fill in the gaps with his own theories.

https://www.theguardian.com/technology/2015/mar/31/bloodborn...
Sadly, alas -- not only are there plenty of ways that code written in typechecked/compiled languages can (despite these benefits) easily begin the irreversible slide into becoming unmaintainable (or otherwise high-maintenance) slop -- but many of the more popular choices for such languages seem almost expressly designed to facilitate this slide.

Which also presents a risk to your "load-bearing" software (whatever that means).

We get the theory and correctness parts. But in the trenches and on the ground, there are other factors to consider.
Big enterprise vendors are always like that.

My first boss wrote the TCP stack for a long defunct mainframe, which was distributed via a “shared source” program that his employer paid for and eventually was licensed to his employer at significant expense.
Tale as old as time

https://news.ycombinator.com/item?id=30768059
Not sure why you're getting DV'ed. If a product is priced such that it is actually profitable to have bots buy it (and presumably re-sell), then it's priced incorrectly and the bots are a corrective market force.

If a gas station started selling gasoline at half price, it would be instantly overrun with everyone from Harry with his pickup truck full of jerry cans to empty tanker trucks.
In journalism there is a saying, source your claims.

You don't need a study, but you need some sort of base to the claim.

Your anecdote tells us nothing, I know many non-whites who got rich from crypto.

Not everything requires a study, but when writing an article you should back your click/race-bait claims up with facts if you just HAVE to put them in there. Maybe just leave it out since it wasn't relevant.
> Update: Yeah I can view them on desktop just fine.

Yeah, this is the fabled content moderation block for App Store distributed apps. The Mac App Store version of Telegram also blocks it, but the direct download dmg does not. I think the direct download apps are also updated more frequently, but I could be wrong on this.
I love circuits (I'm poring over the circuit diagrams for a Rodgers 32c/d organ from the 60's in my spare time).

I'm a musician (degree in piano performance... currently trying to fix an organ so I can start organ lessons).

I am not a guitarist, but I can appreciate the utility and function of guitar pedals.

I don't understand the use for this. I don't see how it is used for music, and the sounds do not seem pleasant to me. Can someone help me understand what I'm missing?
Or at the very least, audit logs so they can see what that support engineer's account did during the period that the account was compromised.
I know people who've done it. One person I know did 3 stints at the same company.

I almost returned to a prior employer and was in final discussions before accepting a different opportunity.

A good lesson to never burn bridges when you leave.
Whats your preferred method of rationing scarce resources?
Having an operating system where the kernel and core userland are developed together is a qualitatively different experience to one that's been stitched together from external projects. I'm not really sure how to describe the difference in experience but the "this is an integrated whole" feel is really quite pleasant as a sysadmin and as a user.

Note that my personal infrastructure is a mixture of Debian and FreeBSD and I dearly love both - if you forced me to pick one of the two to keep I'd be horribly torn.
Yeah, but eating lunch always comes with some risks. At some point, that's not within the frame of saying "no free lunch".
My employer would essentially blacklist you if you left so you could never come back. They're getting desperate for people and are now making some exceptions. It's not very common though. Plus, most people don't want to come back (pay tends to be lower).
This links to the homepage of time.com and not to a page with the title you've got there.
Please explain the different outcomes between second gen African immigrants and American whites. Under your theory every demographic is obligated to want and behave the same as any other. Smart women choosing medicine instead of electrical engineering is prima facie evidence to you some kind of discrimination happened.
I don’t disagree, I just think that using number of employees seems like one of the worst possible ways to handle company reaching X size. I came up with that off the top of my head there are surely better solutions.
Largest GDPR fines surpass $1.3B
Aside from giving your money away to specific under-resourced groups, is the second best thing to just not spend your money?

I think that taking money out of the system entirely means less demand competition for everyone else, which means more resources for others.
> it's premature to say that this kind of alternative theory rules out dark matter

No, it only eliminates the need for Dark Matter to explain galaxy rotation curves.
Exercise could treat symptoms of long-Covid
Seems like continuous-time gradient descent on something approximating a ReLU network would not be too terribly difficult to implement in analog hardware. Instead of summing gradients over a minibatch we could do pure SGD with only one sample at a time, using a latch to hold the sample constant while loading another one from storage. Has this been done?
That's what it was. VM with a barebones deployment system that had a ton of hooks in it.

Really really smart idea that IMO helped Amazon in the 2010s immensely. While everyone else was figuring out k8s and whatnot, Amazon had a good system with CI in place for years.

I wonder how it's fared over time. Amazon was never known for internal tooling in many other places. I hope Apollo is still running strong today.
Yeah, I also want 90hz, but when I need to use HDMI on my fairly recent X1 I must choose between 4k@30hz or 60hz and I would always choose 4k.

The banwidth for 4k at 60hz is only now becoming mainstream.
> The Okta service has not been breached and remains fully operational. There are no corrective actions that need to be taken by our customers.

> Support engineers are also able to facilitate the resetting of passwords and multi-factor authentication factors for users, but are unable to obtain those passwords.

Those two things are at odds with each other, no?
Alternative view: he made a career out of gleaning his father's wastepaper bin, and jealously made sure other people couldn't play in his sandpit.

(Obviously I've never been a fan).
It's motion captured, that's probably just how the actress moved. Real stuff looks fake all the time. The parts that look wrong in the animations are mostly due to small imprecisions, especially in the facial ones.
Yeah, the screenshots they admit are real clearly show Slack, JIRA and AWS being open. What did the attackers see there? Were the customers whose data was viewed notified? How can Okta tell if that data is sensitive or not without taking to their customers?
Not everything needs to be flat and sterile, as is common in modern design. Wacky, goofy and peculiar user interfaces are a deeply rooted part of digital synth culture.
Ask HN: Any tips on organizing a fun hackathon at work?
Hey HN.

We are trying to organize a hackathon at my workplace. The main goal is to have fun and engage with others.
The hackathon will happen during normal working hours and will be voluntary, so the goal is not to get some more work out of people.

Do you have any positive/negative experiences you can share?
Any tips on how to have a fun hackathon?