skysight-inc/HackerNews huggingface dataset:
"Subconsciously, when you learn a piece by heart, its message penetrates deep inside you. It lies at your fingertips, ready for you to make use of it. Many cultures have long understood this. In Islam, people who memorize the entire Koran are given the special title of hafiz, or guardian. "

Mentioning Muslims who learn by heart the Quran as a means to illustrate how memorization makes the message penetrating deep inside us, is something totally wrong. VERY wrong.

There is no single Muslim in the world (and in the history of Islam, including Muhamad himself) who knows the meaning of Quran. One of the obvious reasons you may understand is that a large amount of the Quran vocabulary is not Arabic (even the word "Quran" itself, is not Arabic). Basically you can pick up any random Quranic text and you will not find one single Muslim in the world who knows at least the meaning of certain words.
If you read the Islamic resources which explain the Quran, you will find dozens, and sometimes hundreds of explanations for the same text just because some words are not even Arabic.
So memorizing the Quran by heart does not help you in anyway to understand its message.

I could have said similar things about other examples you mentioned. But the point of my comment is that between programmers we should stick to programming concepts when we try to explain something instead of picking examples from fields which are beyond our knowledge and which approach is merely a waste of time and confusing at best.

Also do not try to overthink a concept. It's easy to be quickly off-topic.
Smoke can be seen coming from the Russian Embassy in the Polish Capital Warsaw
Seems like a rehash of point 1 and that shouldnt matter.

I'll clarify then. Point 1 is that people get annoyed having to work with someone who puts in more time because it makes their work harder. Point 3 is that if people see that someone got a raise or a promotion because they put more hours in, then they will think they won't get a raise or a promotion unless they put more hours in. They will see working longer hours as the barrier to advancement, and if they don't want to do that they'll leave.

I sense you despise individualism which might explain why so many people go work for themselves.

Saying I "despise individualism" is a bit melodramatic. I've run teams for the last 20 years or so and I've enough experience to understand that a good, well-motivated team of devs who communicate well and collaborate on a common goal is far more effective in the long term than a team who have a lone dev who's happy to grind out code in the middle of the night.
You came up with an analogy that doesn't make sense.
The entire message has a tone of being entirely true but not representative of the entire truth. And that just leaves us all hanging with more questions because it doesn't tell us what we really need to know.

2.5% of all customers were accessed by all Sintel employees for the period in question. How many customers did the particular affected Sintel employee access?

They assessed all the actions that took place by the Sintel employees. Were any of them sensitive?

The tool doesn't allow them to create or delete users. Does it allow them to modify users so that an attacker can take over an account?

The attacker had access to "Jira, Slack, Splunk, RingCentral, and support tickets through Salesforce". Doesn't sound bad on its own but have those tools been evaluated to ensure they don't have sensitive information? Do we know what the Sintel employee in question accessed from each of those tools for the time period?

The employee's machine was logged into using an RDP session. Was the employee's machine assessed to ensure they weren't storing other sensitive information? While not allowed, a lot of support engineers will quickly drop in "temporary" sensitive stuff into random notepads and what not. Was this assessed? Also, why does a support engineer have a machine that has the ability to enable an inward bound RDP session at all?? How was that not the first trigger since this is a known attack vector for support agents.

Given the possibly small blast radius of this issue, Okta had all the opportunity to turn this into a communications win for them and just build a multiple of trust really quickly. All these half communications have utterly botched it and that's just really disappointing. We'll still continue to use them because the switching costs just don't justify moving off Okta. But Okta has really taken a hit in their "trust bank".
> Scalping is only an issue if the sales price of products is artificially depressed.

No offense, but you do not understand art.

Yes, there are a lot of bands that could sell higher priced tickets but don't because they want to be accessable to everyone, not just people with money to burn.
> The legal edifice maintaining property rights also requires maintenance.

Hey, just want to point something out here. The quoted sentence is really important. Civil society doesn't just happen, we all (or at least most of us) have a vested interest in maintaining the legal edifice.

So tomorrow, be nice to someone in traffic. And show good grace and community when faced with one of the social frictions (like waiting in line).
Nope. You are just not understanding it.

To simplify: The hackers had minimal access to stuff and couldn’t do much.
Thanks for the reply, I thought it was changing the bitrate on the fly.
squatters.

eminent domain.
Absolutely not. We can't have NFT land deeds (for example) because the legal system has the power to takeover your land (e.g. if you fail to pay taxes), but the legal system doesn't have the capacity to force you to transfer your NFT, especially if you delete your private key, in which case nobody can ever transfer it again.

If the legal system says you don't own the land, but the NFT says you do, the legal system wins.

The NFT appears useful only when it happens to do exactly what the legal system would already do, and is useless when it disagrees with the legal system. As a result, minting and transferring was a giant waste of electricity; you should have just registered your deed at the county recorder's office, the old fashioned way.
The interesting question is: are the resources actually scarce as in "actual users want to buy more of the resource than the supplier can produce", or are scalpers buying up inventory and leaving it unsold simply to drive up the price even more?

There has never been an actual shortage of toilet paper or disinfectant during the pandemic, the production-side supply has always been enough to satisfy the demand - the "shortage" was only because people hoarded up and/or tried to profit by re-selling loo rolls on eBay [1].

[1] https://www.bristolpost.co.uk/whats-on/shopping/ebay-toilet-...
That doesn’t really work if people around you do not. One less trip out of your house so you only leave 4 times a week instead of 5 is several orders of magnitude better than going out with an N95 the 5 times.

If you actually care about Covid the answer is to not leave the house. Putting an n95 on when the mandates are gone so nobody else is wearing one is just a religious act at this point.
This is a theft prevention feature, the same as Apples 'icloud lock'

It works very well to prevent theft. Phone models locked in this way are barely worth anything on markets of stolen goods.

Unfortunately some devices have exploits which allow relatively easy unlocking, and those models are still stolen quite a lot.
People have different styles of working. I have found that if I am deep into a problem, dedicating long hours to solve it is more productive as I have the context for longer time and can try out different things as I am deep in the zone. It is not as simplistic as "they work long hours because they don't have product market fit.". I like to solve problems, engage my brain, and the kind of intellectual simulation I get while working is something I can't get outside of work. I would regularly dedicated 12 hours a day and work on weekends, and when I am out of the zone, I will take a break for a few days, recover my energy and then go back to work.

I had an employer who was exactly like that, so understood it better than others, giving me the leeway. Infact, most of my colleagues were like that. We had our own social life beyond the office, but I did not feel like socializing everyday anyway.
Enjoy it while you can. Realize though that being "employee #1" and wearing all the hats while working with others that "share your values" means they probably think they themselves are "employee #1" and wearing all the hats, which obviously can't be the case in a well functioning team.

I'd hate to see how that works in a large project - like SpaceX where teams have to build things.

IOW, consider you may be better off running your own show while you have this drive. And realize you'll want to hire the best and brightest regardless of their WLB preferences.

Currently it sounds like all the effort you are spending is in service to someone else's vision, and it better have equity involvement on your part because you WILL get interested in other things and unless you've built a war chest for your own ambitions, your work will be for nothing when you inevitably walk away - hopefully to do you own thing.

Don't make the mistake that your employer has your long-term interest in mind. It's not personal, it's just business. It's always what have you done for me lately
A nitpick: Your code will not run faster in GraalVM vs the JVM, it will start faster. If its small scripts where the startup time dominates, then of course it goes faster. For anything long-lived (even in the range of tens of seconds), the JVM has better performance.
monkeys have been moving cursors around on screens (or more elaborate physical or virtual effectors) using cortical implants for nearly 20 years now. the experiments that are published when they do this are well designed. target placements are randomized, task performance establishes irrefutable control- sometimes believed to be as a result of learning how to modulate neural activity to drive the system, and sometimes believed to be a result of passive listening (and learning) of non-adapted neural activity.

it is likely very possible to do what they have claimed to have done.

the big problem has often been intersession stability. some days are good, some days are bad and some days don't work at all.
This is a nice tool!

An alternative for us preferring CLI tools, is the nir-set of tools. Put nircmd (https://www.nirsoft.net/utils/nircmd.html) somewhere in path and add an alias to it. Something like this,

alias bri='nircmd setbrightness'

This allows me to run eg 'bri 80' to set brightness to 80%. Works perfect on my laptop, but I'm unsure how well it works with multiple monitors.

When I had an external monitor plugged in, I used monitoran.
>> Each software version expects a different number of fuses to be blown — if more than is expected, it fails to boot

That branch in the code could be interfered with. Over writing it with NOOP instructions might not be easily possible due to verification of code signing but there’s other techniques like power glitching.
There are definitely a few exceptions. Pontiff Sulyvahn (DS3) comes to mind as one, it's possible that Godrick in ER is also although we'll need to uncover more lore still. Byrgenwerth (Bloodborne) as an institution definitely. The motif of evil with Miyazaki often seems to be the institutional evil that affects the world, and very occasionally specific individuals in those institutions
Understood

>No my issue is with foreign controlled exclaves which can exert disproportionate influence on the locals without being accountable to the locals whose lives they control.

It's interesting that I could swap "foreign controlled exclaves' with 'federal government' here and suddenly many would be outraged. Your argument fits in pretty neatly with anti-federalism and anti- other structures that serve to dilute the power of locals.

It's a valid point to be concerned about loss of local power. I'm skeptical that there is any practical difference here for exploitations of locals (charter-city vs non-charter-city) other than an OPPORTUNITY for competing governments models to prove themselves in a way that lets those in a constrained geographic area compare many governance models to see which works. I can see using charter cities to INCREASE local power, by creating a 'foreign guarantor' that is actually a representation of the locals, ousting much federal power.
So... A method for scalping scalpers?
And yet it uses the very C-like anonymous struct declaration?
But life had other plans
Maybe you know something about them that I don't, but to me it seems alarming that someone needs to be "rehabilitated" for those things.

"Appeared in Epstein's flight logs" = "went on his plane to a TED meeting in 2002", and "has been photographed socializing with him" = "was at a few parties where Epstein 'socialized' with everyone famous he could find", so far as I can tell. From Pinker's account -- which obviously might be self-serving -- they disliked one another. What do you think Pinker did that he could reasonably have been expected not to do, given the information available to him at the time?
In any case, good luck.
You're a fledgling first-year practitioner, with no direct access to the thoughts and business considerations of biglaw firm partners or what they deal with. And yet you confidently conclude that the article "is idiotic and so is most of this thread", as if your statement were fact, with not even a contrary opinion to support your statement.

Congratulations. You're the kind of junior lawyer the article warns against.
Java is typed, JavaScript is not typed. You can make more performance optimizations if you know types. So this claim is unlikely to hold...
Do you have Linkedin?
Ah, some stupid Silicon valley bullshit. Programming and many more things done there, is not work. Yeah, it looks like work, but it is not, it does not produce something necessary for biological living or education or life support. It is more like: I like reading, I read 18 h/day. OK, cool.

Work is something that is done to reproduce life. Programming, reading, is not work, it is life activity itself, do it as you like.

Example 2: it does make sense to optimize biologically needed production. But it does not make really sense to optimize life activity. I like cycling, I measure my performance, but I'm ok that some people cycle just for fun.
...those are the days that never end.
The frame isn't _for_ you, it's for everybody else, and that frame shows (with proof) that _you_ own the picture.

That's why the mona lisa framed in the museum is worth more than a replica picture. It's not even the frame, it's the fact that there's a public broadcast of a form of ownership.
Apple does not provide third parties access to developer fused devices. They do have a "security research device" program that allows nominally more access to the device, kind of equivalent to most jailbreaks these days, but definitely falling short of a development fusing or what something like checkra1n would get you.
Biobots
So there is plenty of open guides on running a server, locking down a single server, but I do not know of guides for locking down an organisation - basically the RFC on how to run a SOC/Noc. Does such a thing exist?

I am not looking for a white paper on Cisco network monitoring but ... somethining opinionated. A blank sheet of paper approach that would only have Fido access, maybe limited to openBSD or whatever.

Something that as a small company one could build something not embarrassing.
I'm not sure what you mean; it is documented in the Intel instruction set reference that IRET is a serializing instruction. It is not only the case that it happens to appear that way due to stores by chance always being retired before the interrupt returns.

It also references Section 8.3 of the Intel® 64 and IA-32 Architectures Software Developer’s Manual, Volume 3A, which also says IRET is a serializing instruction.
But that is all solved with signing and verifying in cryptography. Why does it need to be on the blockchain? I think you are asking the same thing somewhat. In many countries (at least in the EU) the gov now has mobile apps (and horrible desktop versions but the idea is the same) which generates a key pair on your device, sends the public key to the gov where it is connected to your tax number and that is it. This involved a bunch of security steps like your bank. Works very well but unfortunately it is not useable yet by any company; once it is, signing by pen is in the past. It is efficient and blockchain is not needed. But I guess the blockchain fans will argue that if your gov suddenly turns Russia, this centralised version is now not trusted anymore. And they would be right, but like you say; neither are the courts so it falls apart anyway? What’s the solution that is solved by the chain?
It's not the signing that OP criticizes. It's that the "something" is defined by an URL whose destination can change, and otherwise none of the "something"'s content (like, for example a hash) is in the contract.

I doubt a court would consider such a vague definition of content as "real".
> it can be worth them spying on you to get your device passcode

I mean, if they have your device passcode, they already have pretty broad access to your device already.
What were you doing building a product(?) around a 02W anyway? They are supposed to be 1 per person, like the old 0 series. They have never been offered in quantity even when there wasn't a shortage.
It's hardly a legal problem, there are plenty of countries and US states where many kinds of sex work are perfectly legal, and having your life ruled by credit agencies is far from universal.

I understand that with decent regulation illegal goods can't just fly under the radar anymore, I'm just saying that in the current ecosystem there is a use case for this fake money where real money simply cannot be exchanged reliably. In an ideal world we wouldn't need fake underground value transfers but the world is far from ideal.
It's interesting because it could be _my_ profit!

Nevermind the society or the environment. If money can be made, money shall be made, no matter how shady a business /s
> The 2021 full-year GAAP results were impacted by […] a charge of $49.8 million related to the termination of a lease agreement.

oof
> And you need a blockchain for this, to give it the credible neutrality needed for it to be considered something equivalent to real ownership; you can't have it be at the mercy of a single entity.

No, you don't, and yes, you can. And in fact, you yourself say that this is still the case just a few paragraphs earlier:

> People coalesce around this believe, because the edition was released by whoever owns the actual copyright (ideally the artist).
> maybe try copy+pasting that URL

That doesn't work either, because the generator dropped the underscore.

http://en.wikipedia.org/wiki/Flip-flop_(electronics)

Hugo would normally handle such links fine, but earlier on there's an unescaped underscore in "d_out", which makes it go off the rails.
> I'd be perfectly OK with e.g. Norway or Switzerland sponsoring a charter city in Nevada.

-Oh, Norway's already got Wisconsin, the Dakotas and Minnesota sorted - not to mention parts of Washington.

(It was surreal first time I found myself in Minnesota and a shop clerk accidentally toppled the bag she was filling with my purchase. -'Uffda!' she exclaimed, and I quizzically inquired, in Norwegian, whether she spoke Norwegian.

A second's blank stare followed, before she giggled and asked me whether I had assumed she was Scandinavian. Hence I learned of that Norwegian bit of cultural imperialism, 'Uff da!') [1]

[1] https://en.wikipedia.org/wiki/Uff_da
What also is amazing is that people are now buying art for huge amounts of money, not because it's good art or it has any value, but because it's NFT art.

So it's even worse than you say, they are selling a sign pointing to a very cheap house, but not for the price of the house but by overvaluing the sign's value.
What nuance exists when a maintainer of a package distributes malware targeted at people by their nationality? One can assume that the vast majority of the users of this package are innocent people with no government influence.
I haven't had a chance to try a single-wheel electric vehicle as they are not street legal in Germany. But usually I vastly prefer riding a bike over an electric stand-up scooter. My weight is distributed much better on a bike, making the right more stable. On a scooter I cannot reliably raise one arm to give a turn signal. Not signaling can be quite dangerous on shared roads or narrow paths. I never see anybody else indicate their turns on these scooters, so it's probably not a personal problem. Did any manufacturer figure out a way to put easy to read indicator lights on these?

The other thing is that you actually get some light exercise on a bike. Most people with desk jobs would do well to move their bodies a bit more during their days.

One thing that's nice some times about scooters is being able to stand up tall, rather than get into a slightly hunched up position on a bike. The Kwiggle from the GP allows for quite a unique upright body position. So that may be intriguing.
I love the animation of the bike unfolding on the landing page.
Even low-probability bugs will surface often enough if you give it enough potential times to do so. There are >100 Mn Switch'es out there, and the interrupts happens at least tens to hundreds of times a second when in use, so plenty of opportunities :)
A pomodoro is four 25 minute sessions with a 5 minute break between each session.

One "pomodoro" takes 2 hours to complete.
He negotiated the acquisition of Marvel, Lucasfilm, and Fox. That's a lot of ego to negotiate through.
To be fair, it might run faster as well, or not. It seems to vary from case to case.
I thought they adopt SMS 2FA that is somewhat reasonable. But they chose TOTP, lol. Just copy pasta TOTP generator on bot. It gives bots advantage.
This was my topmost question too. The report very cleanly omits any and all mentions of SAML signing certificates.

Solar Winds was the first known incident to escalate to so called "Golden SAML" attack. If the support staff had access to signing certificates, then that would open the door to a wide-scale exploitation of Okta's clients.

A shower of Golden SAMLs, if you like.
they could have someone else hold the stock for them
It is inevitable that certain chains and dapps will be "centralized", in that most of the computation and storage will move to a few big datacenters.

What the people like the author have not understood is that running blockchain ans dapps on Azure is NOT THE SAME as running Postgres and a go app on a VM in Azure in a VERY IMPORTANT way... and that is Microsoft taking the servers down does not make the app or the data go away.

This is THE selling point of blockchain and dapps.
Many ppl like old Nintendo Games and Nintendo refuses to allow running those old games on switch thats when hacking comes in and makes it possible.

Nintendo is just greedy.
AVR fuses are regular non volatile memory, just specifically for configuration purposes
Not sure why you think I believe it to be heroic, I just think I shouldn't be shamed for spending my time how I want to.

You'll note how the shame is being attempted in this very comment thread. It makes me sad. :(
Couldn't this be done using a reset password shipped with the phone? There is no reason to involve a third party at all.
No, it's not a good thing.

The Factory Reset process is defective. It SHOULD ask the user if they are selling, giving away, or otherwise disposing of the device; or otherwise just want to remove that device from their account.
I am not fine with it, don’t twist my words. I would say authoritarians are actually fine with it occasionally, as they support a system where that is easier to be done, and then get to hide behind their authoritarian when shit hits the fan.