skysight-inc/HackerNews huggingface dataset:
That is too early to say. It could be that his account was suspended because he left the job, changed job responsibilities or something else.

Not saying this looks good and really not trying to defend Okta, but a user account being terminated isn't proof that Okta knew about it.
OAuth2 is a really complicated standard and is complicated to get correct. I mentally compare it with SIP which also has several open-source implementations but still often ends up getting outsourced to others due to the sheer complexity of the thing. Though in OAuth2's case I'm willing to say it's complicated because security is complicated. With SIP I really don't know why lol.
I'm not sure if you're offering to purchase some to have their results added? You really don't have to, but I've created a list to help me keep track of which cards I don't have and wouldn't mind testing at https://www.amazon.se/hz/wishlist/ls/7JG01YVBN93M - I'll add other brands later but this is a good way to keep track of things and monitor prices anyway!
Historic England: One hundred years of aerial images go online
Can't read the paywalled article, so also don't know when it was written, but I will speak in the present.

Of course any leader elected in peace is out of his depth in wartime. There aren't that many war-experienced electable leaders around, and it's difficult to have them in place when needed. But Zelensky is doing fine, to the surprise of many. There are two kinds of leaders who, elected in peace time, suddenly find themselves leading a country at war. One kind is found wanting and is replaced. The second kind finds surprising strength and LEADS. Zelensky is of the second kind. Could someone else do better? Possibly. Could others do a worse job? Definitely.

Let's not forget that Putin is also out of his depth. This bit of adventurism was planned as a short simple slam-dunk, but that turns out to have been a pipe-dream. There's a quote from Churchill:

Never, never, never believe any war will be smooth and easy, or that anyone who embarks on the strange voyage can measure the tides and hurricanes he will encounter. The statesman who yields to war fever must realize that once the signal is given, he is no longer the master of policy but the slave of unforeseeable and uncontrollable events.
Same. My theory is ... well I don't have a good theory on this. I think maybe links to a specific thread are not blocked. Links to a person (to just browse) get blocked.
No, Okta also supports various forms of 2FA/MFA, Active Directory integration, LDAP and SCIM user provisioning. Not to mention the fact that even if there are open source alternatives out there, setting up servers, configuring them correctly and managing/updating them isn't exactly a simple enough operation for the average company admin.
There is a huge learning curve with k8s and there really needs to be a "k8s the good parts" for tooling to use. The problem with k8s vs $custom_system is k8s is somewhat well thought out and $custom_system is generally not.
There are the iPhone Smart Battery Cases. It's not the same as a full 5000mAh battery, that's true. But you can kinda get there. I'm also surprised they never released such a phone. Perhaps the production would be just too small for them to focus on.
The US Needs a Center to Counter Foreign Malign Influence at Home
How the book ‘Sex on Earth’ details a new Kama Sutra for animals
It’s strange to me that the article focuses on Requiem for a Dream when Black Swan is much more directly inspired by Perfect Blue - if you wanted to you could even argue that it’s a remake of Perfect Blue. The plots are that similar. The article touches on Black Swan briefly, but I think it gets stuck focusing on the tub shot.
It could damage some appliances - motors for example could stop turning and just start heating up if they don’t get the full voltage.

Why doesn’t it just reset automatically (at least a couple times before tripping permanently) would be my question?
https://archive.ph/onoLL
That's literally defining getServerSideProps to fetch data server side or just using useEffect if you want to fetch data client side.

I don't recommend react in general but it should be pretty straightforward even with little react experience.
As the other guy pointed out, I'm doing this in my spare time with hardware I had or was able to procure quickly/at a decent price (this isn't sponsored, sadly!) I don't have many Samsung cards at this time but I'm looking into my options. I already have 4 cards that I'm almost finished with speed testing (SanDisk MAX ENDURANCE, Integra Ultima PRO, Patriot EP and a Kodak model) and will source more as and when I'm able to :)
I remember in the 90s it was NOISE: Netscape - Oracle - IBM - SUN - Everyone Else.
Birthday paradox?
Even more annoying is the question "Why do you still use..."
Interesting that a CloudFlare email address appears on one of the Okta screens leaked:
https://twitter.com/BillDemirkapi/status/1506109956298317830...
Given that most aspects of Japanese arts were "inspired" (ahem) by Western artists, it's just a good lesson that the shoe can hurt when put on the other foot.

I'm pretty sure without Walt Disney, there would have never been any Anime in Japan.
Can't they just be employees? Would any of the FAANGs notice if they started paying a team of 100 mid-level developers? Add a few admin staff to yearly work out who gets to be in the team of 100, or whatever
Good point. Updated to "implemented".
The same place I found the Raspberry Pi 1/Model B? In my cupboard :D I didn't go out and purchase everything brand new for this post. I used what I had available to me! I often see these 2GB models pop up on our local version of eBay and they're out there. Does the newer version have a different SD card reader or other hardware that will render the results pointless in a comparison with it? (Genuine question!)
you can also override id selectors with :is

*:is(#a#b, .someclass) {...}

overrides any selector with a single id; you add more ids to override more specific selectors (except inline stiles and !important)
I didn't realize Perfect Blue was a flop. Not one I can watch multiple times, but a really well done movie.
Aurora was the major incident. Google has invested heavily in a number of areas with regards to security, such as BeyondCorp, but I haven't talked to anyone from Google sec in a few years so I don't know how things have changed.
I feel slightly annoyed TBH. If it was supposed to be used only for fonts why does the system allow using it for (almost?) everything else.
I'd say people understand CSS very well, but sometimes have deadlines and legacy code and don't have time for redoing the system perfectly (just as Steven and his CSS yeah did not)
It's definitely a risk, but also the wide variety of ABIs are not currently competing, except in a few niches. There are no existing comprehensive standards I could support, as far as I'm aware.
> the Pi CM4 may as well be vaporware - they're basically impossible to find anywhere even in single-digit quantities

That's near as damnit true for _all_ Raspberry Pi products right now. You can pretty much only buy any of them in single unit quantities, and it's like buying concert tickets, you need to keep your eyes open to find out exactly when someone has some for sale, and you need to jump on them before they sell out.

https://rpilocator.com

I managed to snag a Pi Zero 2 W a week or so back, had to get it shipped from Spain to Sydney which cost more than the Pi. I was limited to a single one at checkout.
That is how the Singularity research OS works, except it's done by static verification in a compiler.
Tesla is a complete climate embarrassment, a new report shows
There is a great lecture on The Fountainhead on YouTube by Dr. Andrew Bernstein. Really, really good.

https://youtube.com/playlist?list=PL2fue-FqIIP-C26vR2uAxV-J0...
Keeping One’s $HOME Tidy
As a Windows user starting with Windows 3.1 and ending with 7/10 (as a support person for my family), I'm well aware how this inconsistency piled year over year.

During my regular Windows user years, I used to follow Redmond's side closely too. From my understanding, there are some factors contributing to current state.

The leading reason is "backwards compatibility at all costs", including but not limited to how programs behave. It's known that until Windows clamped down on security hard, older Windows programs used whatever functions they can find from .dlls, and also used "bugs" to achieve what they want. So, any changes which might affect how an older program look or feel are strongly frowned upon.

Windows is a gigantic codebase, and until semi-recently, Windows team didn't know what depended on what (the biggest revelation was printing support needed GDI, which brought all UI toolkit in, hence building a CLI only Windows was impossible). So, I'm guessing they're not entirely sure which parts of these applications are used by 3rd party applications. So they leave in, as-is, so nothing breaks.

The latest layer is the Microsoft's culture of "no polish, just new features" mentality. There's a very revealing writing by someone in Microsoft NT kernel team who said that "We can optimize something, but the change will be reverted, and you'll be berated because new features are much important than improving existing others, because new features are which make headlines and bring more revenue in".

Personally, I don't think that Windows team cares much about UI consistency and some other excellence. It's just a cash-cow and enabler of other applications, that's all, and while I'm not a Windows user, I find it sad.
Azure is awful in general. Microsoft can't even copy other clouds efficiently.
Now you too can underpay everyone in Office Management 101
I usually ask this if someone asks me "why don't you use" -

Tell me how it will solve my current (not future) challenge without making any subjective assumptions but knowing what we are trying to do, and better than the technology/* we have chosen ourselves.

Then usually people shut up.
I’ve worked on air gapped networks and I was probably a tenth as productive as I normally can be (if that) as a programmer. Having all sorts of info at your fingertips speeds up development and debugging quite a bit. I’d be worried your leadership doesn’t understand the trade off they’re making for company productivity for something like this.
Did you see this collection? https://treevis.net/
I wonder what the pi foundation's stance is on using their product geared towards teaching ( https://www.raspberrypi.org/about/ ) to create military applications.
Gem-compare – RubyGems plugin that compares versions of the given gem
This is how I read it in my head. This also confirms to me that the CSS designers made at least one very obvious error, not appreciating that ! means negation to anyone with a moderate amount of coding experience, and undermines my confidence in the whole language.
You can't rake in cash from owned shares if they don't pay dividends and I don't think he has much interest in selling his shares. He's previously said repeatedly that SpaceX won't go public until there are regular flights to Mars, which will likely be after his death.
Maybe there's a way to hit up AMD/Xilinx for an donated or loaned FPGA box so you don't have to use AWS?
There's a solution for this, that's know to work - one way streets. Set them up in a fashion that you have no reason to enter these slow streets unless you're going to a direct destination there.

That way you can avoid passthrough traffic.
Strategies to Improve Continuous Integration
The Toll of Economic War How Sanctions on Russia Will Upend the Global Order
I was thinking more along the lines of whether there is something like a continuous glucose monitor but for dehydration, which could beep or otherwise alert a semi-independent elderly person that they are becoming dehydrated so they could get some water before it started to stress their kidneys. Like those pill boxes with alarm clocks built in so they don't forget to take medication.

But I'm aware there are various issues with CGM's (a friend has one, which may act as an insulin pump as well, and complains that the needle needs to be moved around every so often as the attachment site stops giving accurate readings). The cost/benefit probably isn't there, if an elderly person cannot control their own hydration they probably also aren't able to adequately care for a CGM or similar monitor. If it was something you could implant into the body and poll wirelessly it might have some value.
I suppose it all depends on how much infra needs to be stood up for the absolute necessities of the business to operate. Does the company need that internal ticketing system in place to process external client transactions? Probably not, but it'll need it eventually (so maybe that moves to 2nd tier restore process?). My company's RTO is 24hrs to processing new client transactions. Restoring old ones will definitely take longer, but at least new ones can proceed.

If your own company's RTO is 2w, that sounds like a lot needs to be in place. Part of the business continuity/ disaster recovery is getting management to sign off on those types of numbers, big or small. Make sure they're realistic.

You're right that this type of recovery is not fun. Bryan Cantrill gives a great presentation about managing an outage (https://www.youtube.com/watch?v=30jNsCVLpAE). One of my biggest takeaways, if you're looking at a sweeping outage and a long haul of a recovery, do sleep management asap with your team. Dead tired people are more likely to make brain dead decisions.
He has a lot of wealth, but he doesn't really have that much "money". He can't re-invest in SpaceX by selling SpaceX and then buying SpaceX again... He could diversify away from SpaceX and Tesla, but he doesn't seem very interested in that.
The Normalization of Ponzinomics
> Russia is not a military superpower.

Russia is still part of a small club of countries that can send human civilization back to the Stone Age.
Russian economy will shrink 10% this year, Goldman Sachs: worst since 1990s
Payment gateways are covered by laws that supersede GDPR. So you share the strictly necessary info with them.
Do you know a good alternative identity provider that I can run out-of-the box on my own servers/pods? I've used Okta quite extensively in the past and always recommended it to clients because: "They have more expertise around network security than your small team". I kind of regret this now... But I also don't want to implement my own IdP from scratch...
They're at 250,000 customers now, so that's a run rate of $300M a year from Starlink. I fail to see how their cost of operations is above that if they were to stop launching additional satellites which means they have per-unit profitability pretty good already.
True only for the hobbyist editions of the Pi.
I've watched both movies, never made the connection, even if some scenes are replicated or very heavily inspired, this is nothing new in art in general, not by any measure, and both works are still infinitely more original than the N'th sequel/prequel of whatever they've pushing the last 15 years.

Painting portray the same subject, or use the same lightning or the same composition or be a comment on the same theme endlessly.
Music, books, movies, products, they will always be a product of imagination + previous experience, and that's perfectly human, and good. The artificial limitation on this sometimes inspire great stuff, and other times, the opposite.
I never got exited about micro services because I understood that the complexity would be unreal.

I was watching as the industry went all in on something fundamentally wrong. It didn't make anything better, it made everything worse.

Now we are looking back and wanting monorepos, monoliths with simple code, and low complexity.
Keycloak is pretty standard for this.

https://www.keycloak.org/
Do yourself a favor and stay away from it.
Lol. I have similar annoyances on mac but my linux is fine. At least i can do something about it on linux.
“Becoming Animal” might be over you might enjoy as well.
Documentary 'Futures Past' covers the last days and some of the history of the open outcry system at the CME.

https://m.imdb.com/title/tt2558596/

It has a lot of other wonderful themes as well. I love this movie.
Google security is very well regarded in the industry for good reason.
I'd never heard of "fan death" but wow, what a rabbit hole that is. It's like the pseudoscientific version of a hat on a bed.
My god, get some reading comprehension. You are destroying your own argument that humanities education is useful outside of academia. At no point did I deride Shakespeare and the very first sentence I wrote in this comment chain was "No one denies that the humanities are useful". Instead, I pointed out that the qualities you derive from it are available in other cultural items and that everyone draws connections from media to real life. No one needs special training to do that, and it is a waste to force students spend two years and tens of thousands of dollars to write glorified book reports.
Based on my recent experience with a Librem 5, this is an accurate figure if anyone has doubts. Not doing much with the phone, just a few (like 4) photos and SMS and some light browsing of Mastodon, I can get up to 12 or 13 hours with WiFi turned off (via hardware kill switch) at best - with WiFi on I land where kop316 is.

Both of these figures are way better than they were a year ago, back then I managed to get 8 to 9 hours with WiFi off.

There’s work happening to make suspending the phone an option (that’s how the less efficient PinePhone, that’s equipped with a smaller battery manages to deliver better battery life).
I meant specifically to do an integration for you on your infrastructure, not to use a centralized PaaS/SaaS like Okta. I'm not in a position to say that Okta never does this for anyone, like key customers, but it is not part of their standard offering.
I view OneWeb as a holding company for spectrum. These sorts of companies have to have some viable operations in place to hold that spectrum, but the incentive is to build a monopoly and milk it. Good on SpaceX for iterating and building something better instead of settling for OneWeb's initial design.
> are they doing something very right

yes

> that the rest of the industry can learn from

unlikely

It's simple: they pay absurd amounts of money for top talent and let them work. Look: https://www.levels.fyi/company/Google/salaries/Software-Engi... can your company afford to pay 2-300K cash -- not to mention serious stock -- to bread and butter mid level engineers?
For reference India's petrol prices are at around $6/ga. The taxation on Petrol is quite high, and this is not a new phenomenon. Ergo, the switch to electric makes a lot of sense, but I'm not sure how India's grid will handle this.

The grid-losses were reported to be ~30%, and India provides electricity (albeit bad quality, intermittent) for free to all Indian farmers. Unclear how this can be scaled TBH (ignoring issues with battery sourcing etc.).
Thought so myself too. There are like.. a lot of similarities lol eg https://dbmoviesblog.com/2016/11/02/perfect-blue-1997-vs-bla...
NVC is important, but I like to view it as "reducing the likelihood of inspiring defensiveness". It's definitely a two way street, and the skillfulness with which I communicate is definitely on me, and affects a dynamic.

That said, sometimes even the most skilled communicator might find themselves spining someone up despite their best efforts. At the end of the day all we have is self awareness and good intent, but if the other person is hell bent on being oppositional, that's gonna be very hard to navigate.
Ethereum cofounder Vitalik Buterin warns about Bored Ape NFT and displays
True, but the analysis done in companies have variable quality and are subjected to bias / preferences of whoever is tasked with doing the research.

There's a lot of decent tech not used by companies because some guy didn't like the project.
I am not sure about this, depending on the tone and context it might very well equally (or even more) imply, that the receiver is an idiot for not doing proper research.
What's the part where you disagree?

Yes, those things did contribute. Originally.

But once Unix won, all it needed to stick around was momentum.
I was curious what the lang stats would look like if charted over time. So I did it. This is a stacked area graph of all languages in the firefox repo, calculated by running tokei on one commit every week from the date of the initial commit in 1995 until today. This took about 12 hours running automatically overnight on my PC. Displayed using plain JS.

https://infogulch.github.io/firefox-lang-stats/

It's very rough but it's a good PoC. Note that you can zoom in by selecting a time span. It looks like there are some discontinuities, but I think they are caused by a combination of the somewhat arbitrary one-commit-per-week selection, combined with merging between multiple root commits (firefox and servo it seems), and this repo being derived from a hg. I suppose a different commit selection query would alleviate this.

I created a separate generic lang-stats repo template ( https://github.com/infogulch/lang-stats ) that I hope could be used to easily generate and maintain a chart like this for any repo, after it's been polished up a bit.
At the moment I am exploring Caddy Security[0]. I was surprised how simple and elegant the design is. But it is a relatively young project.

If some people are using it, I would enjoy their feedback.

[0]: https://github.com/greenpau/caddy-security
"supertokens" is an option.

https://supertokens.com/
Do you think it is feasible to add some kind of sticky overflow detection bit for integer arithmetic, the way IEEE 754 specifies for FP? The hope is to be able to efficiently implement checked arithmetic as required by e.g. Ada. It came as a real disappointment that RiscV seems to have made that harder rather than easier, compared to the x86 and its ilk. The sticky bit is hopefully more efficient than traditional condition codes, since the compiler can emit checks for it at the end of a function or basic block, giving the hardware some time to catch up.
I didn't mean the entire image would be in focus, just that your subject would be clear.

A faster aperture will let in more light, so you will not need as long an exposure to get the same amount of detail. It can make a meaningful difference in low light shots.

Adjust your aperture to get the appropriate amount of bokeh, of course; but generally I prefer as wide an aperture as possible in most situations, as long as the focus is appropriate.
Yup, counter questions are effective, like "why do you think Y would have been better?"
> The number of racial minorities in the applicant pool was still almost zero.

What does this mean? Is racial minority a synonym for “non-East-asian, non-Indian, non-white”? Or where there no Indians? I assume there where white and East Asian people? But no latin americans? Or is it an American euphemism for non-black?
> "Why don't you do X" is a great way to understand why someone did Y.

As the running joke on the TV series goes "Phrasing". Phrasing is the key difference, especially in a textual medium. As you point out, it's the tone.

I've seen "Why don't you do X" phrased in a variety of ways, and the best phrasing I've found seen was along the lines of "I would normally do X in the scenario you've described, but Y was obviously better for your use case, would you mind sharing why?"

The worst possible phrasing of "Why don't you do X" is "Why would you even consider Y, everyone competent knows X is how you do it".

...and then it turns out that actually, Y was the best way to approach the given use case, X wasn't suitable, and now someone looks like a bit of a dick.
And you are the chosen one to decide which prices are real and which are not "real"?