skysight-inc/HackerNews huggingface dataset:
GSuite's SCIM options are lacking.

So for example if you want to use AWS SSO tied to GSuite, you have to manually manage users, group membership, etc inside AWS SSO.

Similarly for a bunch of other products.

A couple of companies I've worked for now use GSuite as their primary accounts, and while a ton of things authenticate through GSuite (either as a built-in integration, or as SAML) - when you onboard/offboard users it involves going into a bunch of different systems to create/invite, set up group memberships, and then later deactivate accounts.

We're still considering Okta to solve all that workflow stuff. Yes, even after this event.

I believe Okta can also do custom security flows that GSuite can't.

So, if you're on a trusted device+network, then you might not need a 2FA challenge. Or conversely if you're trying to access a sensitive service - then always require a 2FA challenge every X hours.
Curtiss-Wright is a legit defense aerospace company though…
They've put out a statement by now.

And yes, "investigation ongoing, more later" would indeed be "not much of substance". Tells you nothing.
There is a gravity hill in New Zealand on the road between Wanaka and Queenstown. There is no view of the horizon as described in this article. What makes it even more interesting is there is a stream besides the road that appears to be flowing up hill. My wife and I couldn't understand what was happening for the longest time, but I ultimately put it down to some sort of optical illusion. Interesting to hear there is a name for this phenomenon.
Sounds like socialism, though. Can’t have that!
I felt so sad hearing of your loss, and those of your family. It touched my heart. I do however, think you need some tough love.

First, you need to find a way to end your period of grieving. The purpose of your life is to live it, and your not fulfilling that.

If your Christian, consider following the Jewish periods of mourning, that are intended to enable you to return to life, and the lives of those around you. While Christian doctrine says that Judaism is obsolete and replaced, consider that Jesus would have done it the same way.

Second, I am not your lawyer. Sign nothing and pursue a wrongful death charge against the driver if that is the case. Depending on the circumstances one of the charges of manslaughter might be applicable. Why is this not being pursued by the authorities in your jurisdiction?

Sue the company for negligence if you really do have grounds. If you do not, then stop this thinking.

This is the path that respects your son, not you sitting by his grave at the cemetery every day. More than that, respect him (and your family) by setting an example and returning to life.
If we're arguing here that it's a great form of professional development, why would it be a joke to get better at your job, on your job?
This advice makes a lot of sense to the affected person after the fact. But when someone's hurting, in that moment, the cannot relate to this advice. Human nature is immensely complex, and hence weird in that way.

OP and his wife have been struggling with the loss of their son, a part of them, for years now. By now they must've heard this advice to move on many times; but it just doesn't feel right to the person experiencing the grief and pain. The people around them, and our community here on HN, needs to provide them with small, actionable steps, so that they can slowly work up from where they are right now, without sacrificing anything or values that they hold dear to their hearts. Asking them to let go is most likely going to be counter-productive.
Every time Microsoft does something that a couple of people aren't happy with the trumphets of "now is the year of Linux" sound everywhere, in the end the large majority of consumers and the developers that care to get money from those consumers, keep using Windows.

When XP came to be, when Vista was released and DX 10 was vista only, when Windows 8 arrived, when all the talk about WinRT started, .... now Windows 11 with these issues.
10 years ago SSDs weren't common, and they are 10x performance improvement alone.
seems like they have done an exceptionly well done, high availability power design :D
I remember back when OVH was smugly mocking anyone who had concerns about their WC system, to be fair the concerns were kind of ridiculous but ultimately their system _did_ fail catastrophically.

Glad to have left that company years before the fire, never doing business with them ever again.
seems you're both thinking in absolutes
This worked; I didn’t know this was even a thing, so — many thanks synthmeat!
Putin Misunderstands History. So, Unfortunately, Does the U.S.
The key thing here is _user controlled_ private keys: this means that those can leak, and if they leak, you're in trouble.

A better solution is to use ephemeral SSH keys generated using an SSH CA. This kind of thing can be implemented with Hashicorp Vault, though I'm sure there are plenty of other solutions out there.

It simplifies key checking on servers too, as they just need to the details of the signer and there's no need to juggle keys in LDAP.
It’s not, it’s Guillermo de Orange. Source: check spanish wikipedia and the ratio of google results for each term.

Sorry!
After mumbling "x-x-l-x-o-r" my brain decided to pronounce it "excelsior". Huh.
> Interestingly, this places much of it firmly as a subset of the natural sciences, as proof checkers are physically realizable as compilers (well, certain compilers anyway).

That's a bold assertion. I think entire books have been written as to what kind of "science" mathematics is, if it even is one, and what the ontological status of mathematical truths is.

Regardless of what mathematics truly "is", though, the process of doing mathematics is substantially different from that of doing research in the natural sciences. The arbiter of truth in the latter is experiment, and in particular, inductive reasoning. But experiment and inductive reasoning have no place in mathematical truth (although they may be used to generate hypotheses).

And that's leaving aside all of the fundamentally non-scientific questions of mathematical philosophy, such as "is mathematics true/real" or, somewhat more practically, "should we assume the axiom of choice, or the law of excluded middle, or the existence of different kinds of infinities".
Apart from a guarantee of no such annoying popups, Nitter also always loads significantly faster than Twitter for me; and I much prefer its visual design for actually reading things, makes it much easier to focus on the content.
If education were supposed to benefit the student then the educational systems wouldn't let them choose non-beneficial majors. Loans are fine if they lead to greater returns. The only writing that's on the wall is that society has to decide between propping up the useless subjects and students or subsidizing them so that they can keep producing cultural value instead of actual value.
> In some ways, if Okta can fall basically anyone can

This might be true, but for someone to "fall" they must be targeted to begin with.

If "LAPSUS$" is after big companies with significant IP which they can hold ransom for millions, as a small business you'll be safe because they won't even bother attacking you, and may not be willing to put the same amount of effort into breaching your small company's SSO than they would for Okta.
And your focus and situation awareness is out of the window.
> Not sure what you mean by "appeals to authority".

Read our previous conversation, your comments were about Woodcocks background up until you wanted to change the topic entirely to discuss Russian internet censorship. You were completely unable to come up with a coherent technical explanation as to why Bill wasn’t wrong when he said what he did.

> I suppose, but that is because I actually know what I'm talking about.

That’s it. You can’t supply any useful facts, everything that comes out of your mouth is supposed to be the truth because you are an expert.

Yet, your Linkedin makes it pretty clear that you are a nobody. Just a perpetual software developer and occasional low level manager without any real achievements in his life.

I tried very hard to dig a fact based argument out of you, but I think you know very well that you’re defending bad policy.

The idea that declaring an “incident” over something like this is actually necessary, rather than just a move to appease questions from management is completely frivolous. If you were serious about your security posture, you’d be prepared for these events in the first place.

Trusting NPM is inevitably going to get you hacked.

> are stuck in a muddy trench of incoherent rage you dug for yourself. Again.

Read your own comments, they’re the incoherent ramblings of a crackhead.

> Definitely sure you don't have anything to say, but are committed to telling people they're stupid because

Look in the mirror, you were the first person in this conversation to use words like “idiot”. I merely suggested that the word would be better applied to you.
Inside London's new $25B 'Super Tube'
These two are interesting for comparing Daimler approach, systems used, and engineering philosophy. From the first presentation, Slide 9 is interesting as review of the different levels of automation.

From Slide 23: If you don't take over when requested, after an automated stop, car will unlock the doors call to your emergency response center.

"An Automated Driving System for the Highway - Daimler" [PDF]

https://group.mercedes-benz.com/documents/innovation/other/2...

"A Joint Approach to Automated Driving Systems - Daimler" [PDF]

https://group.mercedes-benz.com/documents/innovation/other/v...

Edit:

"The technical requirements"

"When the DRIVE PILOT is activated, the system continuously evaluates the route, traffic signs, and occurring traffic incidents. As a layperson it’s hard to imagine how sophisticated the hardware and software of the S-Class is in order to be ready for Level 3. Even the “normal” latest-generation
Driving Assistance Package has the following:

• A stereo multi-purpose camera behind the windshield.

• A long-range radar in the radiator grille.

• Four multi-mode radars (one each on the right-hand and left-hand sides at the front and rear bumpers).

The optional parking package additionally includes:

• A 360°-Camera consisting of four cameras in the right-hand and left-hand exterior mirrors as well as in the radiator grille and at the trunk.

• Twelve ultrasonic sensors (six each at the front and rear bumpers).

"For the DRIVE PILOT, many additional components are needed besides the sensors of the Driving Assistance Package. The long-range radar in the radiator grille is combined
with a LiDAR (light detection and ranging) system. Whereas radar uses radio waves, LiDAR employs pulses of infrared light in order to optically determine an object’s
speed and distance and to create a highly precise map of the vehicle’s surroundings. This combines the strengths of both technologies: LiDAR sensors operate with higher precision,
while radar is advantageous in bad weather, for example."

"The rear window is equipped with a rear multi-purpose camera that scans the area behind the vehicle. In combination with additional microphones, this device can, among other things, detect the flashing lights and special signals of emergency vehicles. The cameras in the driver’s display and MBUX Interior Assist are always directed at the
driver so that they can determine if he or she falls asleep, turns around for too long, leaves the driver’s seat, or is unable to retake control of driving for other reasons."

https://group.mercedes-benz.com/magazine/technology-innovati...
I'd say learn hooks from the beginning. Official react docs are still using class components but in a real world hooks are much more common. You can (and should) come back to class lifecycle later when you're comfortable with writing basic react code.

I believe there is beta version of react docs which is rewritten with hooks. I also heard good things about fullstackopen course.
People outsource auth to a specialised company (okta) and they outsource tier-1/2 support to a specialised company (because they are a multi-tenant B2B SaaS co.) If this were not a SaaS product, instead was a well-tested, audited and certified software package that was bought and run in-house by FTEs (and audited periodically), this additional complexity could have been avoided and this breach would have been much harder.

As an industry I don't know if we have made rational choices along the way.
Study show that people think that data analysts and accountants are boring
It is not true, computational photography is not the thing that traditional cameras are missing. What they need is a seamless user experience. And while traditional camera excels at capturing (in terms of user experience), it lacks at anything after that. Processing, sharing, etc.

Another important factor is “the best camera is the one you have with you.” This killed the compact camera segment. I don’t think it eats much into the interchangeable lens camera market, which is what you claims are becoming irrelevant.

Just to prove that computation photography is not missing, it’s not new at all. Digital photographer has been using those techniques all the time, including HDR you mentioned. Some Sony camera can stitch panorama automatically so there are examples that in camera processing are also there (some Sony cameras can install apps that process HDR too, IIRC, but they killed that online store.) Again it is the user experience, if it is seamless and doesn’t take you much additional effort, then it becomes a more useful tool (in terms of how often you use it.)

Your criticism of “producing worse result” again is not a matter of computation photography. It is just a matter of FPS, ie how fast the sensor reads out the data. Cell phone cameras especially iPhone (a few years ago Apple hired an indie app developer that optimized the app crazily using hand tuned intrinsics to capture highest FPS that have been seen on that model, IIRC 20fps.) But nowadays even FF sensor can be read out at insane FPS making your point irreverent. This is not a coincidence because a) who do you think develop those sensors used on smart phone and b) it has many other uses other than producing low artifact HDRs.

Also if you want no-artifact HDR, not just low-artifact HDR, then get the biggest sensor you can get and take single shot HDR, not a cell phone.

Lastly, computational photography is a necessity for smart phone, just because of physical limits. Indeed it’s a blessing that you can squeeze that much from such a tiny camera. But make no mistakes, it doesn’t win in the quality department, and people don’t hate it because it is “cheating”, but about the quality.

Just to name one feature considered to be cheating and eventually becomes a standard in lens design: aberration correction. I think Olympus started it first in M43 that the electronic communications also send barrel distortion and CA correction information back to camera and write it in the EXIF data, and correct it both in the fly and in any preview or rendered output (ie this is a mandatory correction.) at first it is seen as an inferior lens design philosophy and eventually it is seen as a better optimization (as you only care the end results and whatever means towards a better end is a better optimization) where the biggest benefits is size (optimized/minimized size given same quality.)

So no, it is not a controversial take, it is just a wrong take.
Theres been talk about alternative search engines recently abd the prwctice of putting ’reddit' in google searches.

Feels like you could do a better 'medium' just by locating angry rants left by enthusiasts and experts on reddit.

Or the thing where you scrape HN for all links to a book/site.
> who has more expertise at building and running an SSO service than a company that's selling that service?

If Okta gets away with this (and the Equifax breach and subsequent outcome suggests they will) it proves that the market doesn't actually care about security, thus a company selling that service has little incentive to actually invest in security.
Stereotypes suck. Why would data analytics be boring?
First, I wouldn't be so harsh on them: statistically, the probability of successful attacks increases with the size of the company, and having lived long enough I consider it a miracle that the likes of Apple and Microsoft had seen so few leaks.

Second, zero trust is a very specific concept that basically refers to not trusting networks traditionally considered as more secure, such as corporate LANs. It is definitely not a panacea, not to mention that no large company, including Google, is able to implement it in full without incurring enormous costs.

Third, whatever you do, it's extremely difficult to protect against an inside job. I'm not suggesting it was a case at all, I'm just saying it's better not to jump to conclusions too hastily.
This point makes literally no sense to me. He says don't start coding before you fully understand the problem, and then he says the way to explore the problem space is coding (the code-test-improve cycle).

By the way I agree with the last part. Sometimes the best way to understand the problem is writing a half-broken solution for it. You just have to be aware that what you're writing probably won't solve the problem, and make sure all the other stakeholders are aware too (that's usually the hardest part).
Or you could foster a good personal relationship with your employees. If that's impossible for you, some will inevitably hate you enough that they will take the bribe anyway.
> Whenever we had to learn the times tables or the squares at school, I would just work them out in my head instead of memorizing them.

I took a slightly different approach: memorize what is important.

For some reason, they wanted us to memorize the times table up to 12 when I was a kid. I quickly recognized that it was only important to memorize it up to 9, and even then there were patterns. Why is 9 more important than 12? Because it is incredibly inefficient to figure out a product each time you need it, but the rules for multi-digit multiplication were generals whereas the rules for single-digit multiplication only worked for single digit (and were necessary for multi-digit multiplication anyway). The trick is to figure out when the efficiency outweighs inefficiency.
Ah, in this case you can find your friends in the places you like. For example you like an outdoor setting, then you should go to the park. The same applies when you come to the reading book club if you're a bookworm (like me) :">
I'm talking solely about liability when the system that you sell as being able to operate on behalf of a human gets it wrong.

Comparisons of the systems is irrelevant to the very simple point I made - putting your money where your mouth is garners trust.

As for your claim about autopilot being simple, and humans having ample time to correct its mistakes, well, two 737 MAXs and one Air France flight are very straightforward counterarguments.
I used to have a iPhone 6S Plus and when the camera died, I decided I wanted a more private phone. I opted for the Pixel 4a 5G and installed Calyx OS.

I absolutely love Calyx, and wouldn't move from it. However, the battery life even compared to my old iPhone 6S is pretty bad. I'm not even a heavy phone user, I don't use social media or have many apps sending me notifications (only Signal) and I feel like my phone can't even last two days of light usage. My iPhone I could use similary and I could usually get 3 days of usage.
> This led to serious vulnerabilities and backdoors.

This is a matter of implementation; not whether the implementation is in hw or sw. Do you have any examples, where there was a such issue for example in Cavium Octeon (used by Ubiquiti in their USG routers), Qualcomm IPQ-xxx or Marvel Armada SOCs (used by multitude of other vendors)?

> This is a feature, not a bug. It's quite difficult to trust commercial routers.

It is difficult to trust many routers; even if they are open source, their maintenance might be not exactly transparent.

> Citation needed. Modern CPUs are very cost-efficient at this.

Typical routers do not have desktop or server class modern CPU. They run on 700-1400 Mhz, and they are busy with things like firewall rules (why do you thing that Fasttrack on Mikrotiks exists?) or, when a beefier CPU is available, with BGP. You can test it for yourself and see, that with hw accelerated AES and SHA you can saturate your available bandwidth and with Wireguard you can saturate only a fraction (unless you have low enough bandwidth...).
The amount of effort they invested into breaching Okta is probably way more they'd invest in breaching any single company's SSO.

If "LAPSUS$" is after big companies with significant IP they can hold ransom for millions of dollars, it's most likely not even worth their time to find let alone attack your small company's on-prem SSO even if it was a single shell command away, so you'd still be more secure.
(Title truncated from original "OVHcloud fire report: SBG2 data center had wooden ceilings, no extinguisher, and no power cut-out" to fit HN length limit)
Pre-market trading is already -9% (was -14.5% before that tweet).
First, as other people are saying, you are in a bad place. Sitting in the cemetery every day is helping no-one, and it's not betraying your son to stop, although it might feel like it. Do you think he would want you to waste your life doing that? Get help. Also if you get a therapist and it doesn't help much, don't let the inertia of depression keep you with the first one. If you're not seeing some kind of change (not major changes, any change) within 4 months, find a different one.

Second, most replies assume you have 2 options:

accept the settlement and move on

Reject the settlement and sue

But if you don't have the money to sue, you still don't have to accept the settlement. Just don't sign. You can still make them lose in the court of public opinion. That is, apparently, what they are frightened of. You can make sure every parent at that playground, at the schools where they take their kids, knows how negligent they are. They could sue you for libel, but that would be bad publicity for them (suing a bereaved parent?).

As others have said, you need to make sure your family are okay. If your family want to settle, you do need to address that before deciding, and come to agreement with your family

The company have given you a Schelling point, but you don't need to accept their Schelling point, which is there to benefit them.

You may need to promise your family some other form of closure if you don't want to settle, Eg a time limit on how long you campaign for. It may be that you need a family therapist to help you have that conversation in a nondestructive way
Those are batteries (i.e. things that store energy for later use). You'll notice that none of them are actually used at any scale, and certainly not to provide baseload for solar/wind.
> I'm Romanian and we don't have streets named after Antonescu

In your town?

> It is illegal to have streets named after Antonescu

Hm, really? Then again -- and sorry if this comes as a shock to you -- Romania isn't all that well-known (at least in the northern half of the EU) for living up to the law.

From https://news.ycombinator.com/item?id=30700460 :

> So, let's carpet bomb all those Strada Ion Antonescu it took me all 15 seconds to find across Romania. After all, you are saying it's illegal to name a street like that, so let's de-nazify them. Right?

My own search for "Strada Ion Antonescu" on Google Maps popped up seven results across Romania, but that was zoomed out from Lviv to Thessaloniki to see the whole country. Don't know if there'd be more if I zoomed in.
Cool, it went somewhere very wide and deep.

I guess the only genuinely interesting question worth asking (and hoping for an answer to) is, given the back and forth about performance and Myrinet vs IB on here... how well does the design stack up in practice to an Ebit-scale environment?