skysight-inc/HackerNews huggingface dataset:
I've always found that the concepts are not the difficult part of SELinux. Instead it's the complexity of the configuration and tooling which is always a headache.
How relevant is Twitter to most people?
Wage slavery: 3200 years old and still running

(only thing worse is the actual slavery of course which thankfully is now not all that prevalent)
How/why doesn't the article mention his last tweet thread??

https://threadreaderapp.com/thread/1254006990440763393.html

Obviously the thought that David Enrich from the NYT destroyed his life....
Good for him. When he was made to step down the first time, it was my understanding that they stripped him of his stock grants for work -already done- at least this way he's made whole. Now he'll be able to start that fashion brand he's always wanted....
If something is important to me then I will hear it outside of the news. My neighbours, family, friends, email from government etc.

Of course, they might hear it from the news, but the idea is that I (and them) don't need to, to get on with life and still hear the important affective announcements.

The news is new.

It's more entertainment and sensation than information.

I do hear the news on the radio sometimes, this is ad supported and license fee supported. It's a side effect of listening to other programmes.
From the original function call.

It basically restarts the current frame.
That license is wild. It bans all sorts of activities and I can't imagine any company's lawyer signing off on it. Some examples of things that terminate your license...

* Serve in the military: "Be an entity or a representative, agent, affiliate, successor, attorney, or assign of an entity which conducts military activities;"

* Sell anything to a police department: "Be an individual or entity, or a or a [sic] representative, agent, affiliate, successor, attorney, or assign of an individual or entity, that provides good or services to, or otherwise enters into any commercial contracts with, any local, state, or federal law enforcement agency;"

* Distribute violent media: "Be an individual or entity, or a or a [sic] representative, agent, affiliate, successor, attorney, or assign of an individual or entity, that broadcasts messages promoting killing, torture, or other forms of extreme violence;"

* Have a corporate charter that doesn't reserve enough board seats for low-pay workers: "Ensure that if the Licensee has a Board of Directors, 30% of Licensee's board seats are held by Workers paid no more than 200% of the compensation of the lowest paid Worker of the Licensee;"

* Discriminate (even unintentionally) based on a protected class: "Discriminate on the basis of sex, gender, sexual orientation, race, ethnicity, nationality, religion, caste, age, medical disability or impairment, and/or any other like circumstances"
Of course the board has information that hasn't been published yet. Every board does.
Go wins in performance against languages whose runtime was never about performance, and are usually interpreted, what a surprise.
Thanks for the feedback. Would it be good enough if you could turn that off? Hadn't heard this feedback before but it's fair.
Probably. It's a fascinating one, though, for the combination of how coherent the description is, and that it's an idea that represents a very narrow point in time in between bandwidth becoming good enough for some to find it practical to send off files to someone else to burn on a DVD and before high bandwidth connections becoming commonplace enough to render it meaningless. That's a very narrow time frame.
When I was a kid "handicapped" was common, but then it became regarded as offensive and was replaced by "disabled". I thought at the time it was silly, as abled/disabled was pretty binary ('dis-' = 'not'), whereas "handicap" covers a whole range, and encourages us to think of ways to "level the paying field".
I am on a safe comfortable bed in a safe comfortable flat in a safe comfortable city.

My friends in Ukraine are not so fortunate; they are profoundly unsafe and uncomfortable and they and many of their friends and family are now dead, refugees, or Russian prisoners, and their neighbors’ houses were turned to rubble.

Neither are the Russian journalists recently murdered or thrown in prison for nothing. Neither are the at least 14 journalists killed so far in Ukraine, some directly targeted by the Russian military.

If I were president of the Freedom of the Press foundation, I would either say something about it or resign. Someone who is under such grave threat (or so embarrassed/ashamed) that he cannot speak at all is in no position to remain president of the Freedom of the Press Foundation.
The company is Amarisoft: https://www.amarisoft.com/

It's not SaaS, it's a software solution running on Intel PC/servers. You plug a (high end) SDR or remote radio head system to feed the PC with the samples, and the rest is pure software. They sell the software. Other companies build on top to sell more complete solutions.

It's becoming quite common at companies involved cellular, as you can have a 4G/5G "network in a box" for relatively cheap and it's very useful for a first pass of testing before going in the field on a "real" network.
You've seen through the fashion trends in programming, welcome to the club.

I myself have been listening to Uncle Bob Martin on loop while I wait to be able to see normally again. He's got a lot of advice about making systems that you won't be afraid to change, and thus can make rapid progress with. He also hates fashion trends.
Much better than my poor attempt, thanks for sharing.
> Ask an M-theorist "what are strings and branes made of?" They'd probably say something like "in M-theory, they are fundamental entities, they are not made out of anything more basic". Well, an idealist can say the exact same thing about minds. Different minds have different properties, just as different strings and branes can have different properties, but for both theories they are entities which cannot be reduced to anything more fundamental.

Well, here is where we get to my claim about complexity. The important point about strings or branes or particles in the SM is that they are characterized by extremely few parameters. I'm less familiar with string theory, but particles in the SM have electrical charge (+1 or -1), color charge (red, green, blue), anti-color charge(antired, antigreen, antiblue), spin (0, 1/2, or 1) and mass (this can take 16 possible values). There are 17 fundamental particles, and the theory describes all of their possible interactions based on the numbers above.

Contrast this with the minds of idealism: to be in any way recognizable as the concept we call mind in our daily lives, minds must be characterized by probably thousands of parameters. If a particular version of idealism recognizes other people and the broad strokes of the world as we know it, it must at least allow for tens of billions of different "fundamental constituents", the different minds of all humans that have ever lived, if not an unbounded number given that more humans will be born in the future.

But even then, if we accept minds as irreducible as we must with fundamental particles or strings, we should still be able to come up with a theory of the properties of minds, and dynamical laws that describe their interactions with other minds and/or ideas or other constituents of the idealistic universe. Are there any philosophers or scientists who have attempted to do so?

And I don't think it's fair to say you accept all physical laws as describing the universe, as the physical laws describing two electrons exchanging a photon have no room for "a mind" in that picture.

So, if you don't accept materialism (that is, don't accept that minds are an emergent phenomenon, with physical reality being fundamental and irreducible) then you don't have a complete description of reality until you also have a different set of laws which explain the functioning of minds.
Except I think very few people are impressed. I definitely have a vague negative association with people who wear watches. It's just some expensive show off fashion accessory that you have to lie about getting utility out of.
>It doesn't matter if your OS or containers are made of security swiss cheese as long as compromising one thing doesn't lead to compromising another.

I hope you never work with customer related data.
I can't thank you enough!
Not sure about need but I do remember it being a pain in the ass to run anything that expects to be managing docker inside docker. Things like self hosted gitlab ci where its trying to start up containers itself.
Isn't this just a novelty effect? Most people who want TikTok or Twitter already have it installed. Truth Social is new, so of course it's getting more downloads.
It Will Be Years Before Raytheon Can Build New Stinger Missiles
Every single street pill or powder is suspect enough to just be rolling dice. Probably dark web too. People think they're taking Xanax...
That's awesome to hear! If you could share any working Hello World repos or similar using Gluon and SQLite I would massively appreciate it. About 5 years ago I developed a GUI desktop app with TornadoFX, Spring Boot and SQLite and it turned out to be incredibly solid, and I've always wanted to go back and try to find out a quick template repo with Gluon to try and do more small desktop apps again.
What was the problem with Trump using Deutsche Bank?
... and it seems to have "invented" a previously existing product, including name. This is what worries me about relying on GPT (same prompt - "startup idea:"):

"Startup idea: a tool that can be used to identify, track and rank your social media followers, with suggestions and reports that could provide your with a better grasp of who you’re trying to reach.

There are many ways in which you can develop your Facebook, Twitter, and other social media profile. One of them can be to get as many people to follow you on social media and like or comment on your posts as possible. We’ve come across a tool that can be used to monitor your social media profile and track your followers.

The SocialBro tool can help you achieve this aim by tracking who follows you on Facebook and Twitter and give you some reports to help you get to know your audience better. SocialBro is a tool that can help you monitor and measure your social media activity. What this means is that you can set a goal and measure whether or not you’ve achieved it. For example, the goal you set for this tool could be that you want to get your Facebook friends to like your page."

Compare: https://socialbro.en.softonic.com/ (now Audiense)
What a cartoonish view.
Hum, as another admin... No thanks.

With IllumOS I can agree on zones, I can partially agree on lpar on AiX, I can accept GNU/Linux limits with cgroups. Enlarging the attack surface to follow the current wannabe Gurgle mania... No. Like no in the recent past to full-stack virtualization on x86 to enrich VMWare, buy big desktops sold as powerful servers just to play matryoshka doll for someone else business...

Of course, it's hard to satisfy hw "subdivision" vs sw subdivision, in the past we have tried the hw path with blades for the small side, infiniband and co for the large side and both proved to be not very scalable but the issue is in actual OS design and can only be solved changed that: An OS mush be a single application, with internal namespacing, networking. We have seen it in various past OSes. It's about time to make them again accepting that the IBM model is good only for IBM, witch means for selling stuff to people having no choice but buy or ignoring something better can be done.
It's free to set up. Justify why it can't be https.
I think my main problems with AppArmor are the feature set isn't coherent across all distros that use it and it isn't integrated too well with audit tools. OpenSUSE ships distro patches that are a major hack to make ausearch properly show AA denials, while others need to look at dmesg and remember to disable printk ratelimit. The supported feature set is fun, the kernel mainline vs Ubuntu vs SUSE feature sets differ a lot. Ubuntu supports fine grained socket mediation (as in specific ops) & dbus. OpenSUSE supports some of the socket mediation, but as life has demonstrated some rules that work on Ubuntu are incorrectly downgraded and for instance all unix socket access gets blocked (though thanks to the AppArmor folks this got fixed now). Arch which I'm considering to be close to mainline has no dbus and no fine socket mediation. In theory one can use the same policy file on all systems, but the way it gets downgraded is not always predictable. At least the features are somewhat discoverable though /sys/kernel/security/apparmor tree, but I don't know what happens when say the kernel reports dbus mediation, but dbus-daemon was built without it. Then there are also some missing features, I think the abstract socket mediation is still not there. Lastly, the parser is super slow and memory hungry, especially when throwing some AARE heavy profiles at it. It happens that Ubuntu Core makes heavy use of apparmor profiles to lock down snaps on embedded Linux devices, and all the timings data that we collect show calling out to apparmor parser taking the largest chunk of the snap installation time.

FWIW mediation of dbus & network is already supported by SELinux in all implementations I've tried, but then SELinux has a separate set of warts. Eg. trying to use the same source policy and building it on hosts with different tooling/refpolicy. Using `optional_policy` doesn't cut it if types are not known at all, and as debugged with good folks from #selinux, the only way to work around this was using `ifndef` and passing defines to m4 interpreter.
Watches are high status beanie babies.
Yes, they have a whole page about it:
http://www.carrotmuseum.co.uk/ww2seeinthedark.html

EDIT: Just to add, carrots are good for your eyes, but they don't help you see in the dark, which is what the specific propaganda campaign was about. However, one of the main focuses of the campaign was to increase consumption of carrots in the population to alleviate food supply shortages.
Yes, especially if you have account-level usage that isn't just a rollup of user usage, e.g. API usage that isn't tied to a user, but to an account that multiple users are members of.
> discover other users on the platform

I'm not sure but who really has lack of random contacts?

Maybe those vibrant meeting places could/should be a click away from my profile. In a walled garden that means in the same garden, behind the same wall. But in a free world it can be somewhere else. And as Ronald Reagan said: tear down this wall!
[25 Apr. 2020]
Eco-drive is awesome. I used to wear an Eco-drive for ~8 years and I never had to charge it or even adjust the time – I doubt it lost more than a minute or so in all that time.

I have a couple of Seiko solar watches now. They're good too but the charging is not as good as the Eco-drive as they charge pretty poorly indoors or in cloudy weather.

As an aside, the most expensive Eco-Drive is now the Eco-Drive One at ~$5400 (https://www.sakurawatches.com/citizen-eco-drive-one-limited-...) - named so as it is only 1mm thick.
Thanks for your response and questions. On the point of payments. Yes would love to do this for payments. We've abstracted away stripe in this way internally but offering it to everyone is more of a question of how to do it right. Do people want to use their own stripe account? If not do they want us to manage their payout details and customers? It's worth doing but only if we can do it right.

On currency vs Forex. The Forex service is more for those needing trading data, that's what it is. The currency service is more generally useful for providing currency conversion in your website or app or that's how I think of it.
Shit, I just donated to AFWall to get paid features. Didn't know it was obsoleted.
I agree. I think they understand that they do not want to comply with the license terms.
Congrats on the launch!
Looking forward to seeing innovation in this space!
We just yesterday decided to disconnect our home water boiler from the central programming.
Just can’t seem to figure out how to optimize to reduce consumption whilst still having hot water when we need it!
Formal verification helps everything be more resistant to cyber attacks.
Title makes it seem like foul play, but I personally think not given the tumultuous history of the man being discussed (rip).

Eg: There was a similar HN post when the same man went missing (almost exactly one year ago to the date):

Deutsche Bank Whistleblower Vanishes

https://news.ycombinator.com/item?id=26922463
Hi, author here.

The project is open-source (https://github.com/quii/learn-go-with-tests) so there's a few options available to you.

In releases, you'll find PDFs and epubs, I'm pretty sure most epub readers will let you use a dark mode. Or you can just read the markdown files on GitHub, which also supports it.
The level of detail seems variable. For example, this one looks like a Counter Strike 1.6 map: https://app.ignitionrobotics.org/OpenRobotics/fuel/models/Fo...
I don't think as a user you actually can remove systemd at all. Everything is set up to work with it. Removing systemd would be closer to forking the distro and maintaining it yourself. If you wanted to avoid systemd you would have to pick a distro which doesn't use it.
Exactly this. I’ve run SELinux on for various workloads for over a decade and have barely ever had to touch audit2allow. And what I have done is codified in ansible so you can just copy and adjust for new cases.
Yes.

Found dead exactly 2 years after those last tweets.
I think SELinux can have its place on servers, but is a tough sell on the desktop.
> controlled by... someone?

Just like now.

But: That someone might well be yourself! (shameless plug): https://seppo.app (German vaporware to date. Translate with e.g. deepl.com)
Mac SE buried in mud for 6 months still boots
But ultimately, it should take more surprising evidence to shake up your beliefs about the coin that it would to shake up your beliefs about Mars, right?

So, the prior which is strong/weak is the probability distribution of probability distributions. There is a <<1% chance that I will ever believe there is a >90% chance of flipping heads. But there is a much greater probability that I will one day believe there is a >90% chance of life on Mars.

What terminology would you use to describe that, if not strong/weak priors?
Eh, I generally disagree - but not completely.

Set SELinux to permissive for your personal systems at your own relative risk.

Never disable it, you'll end up in a situation where nothing is labeled and relevant policy adjustments probably don't exist. Making re-enabling it later a nightmare.

I'd argue it's particularly advantageous for desktops where untrusted software is a more common occurrence... and other controls (eg: network isolation) aren't as robust.

For business use, it's probably worth some investment. Any serious compliance program will probably want an explanation for why you aren't using it/equivalent.

It's not some amorphous thing, it can be learned and handled. I used to routinely disable it but I haven't in years

There are clearly defined objects and areas of responsibility. It's just buried under piles of documentation

semanage and all of the other tools are indeed cryptic, but you can generally get by with two steps:

- Identifying triggered hits

- restore contexts / update the policy as appropriate for this use case

I won't say it's easy, an employer of mine paid for two weeks of training that focused a lot specifically on this.

A lot of it I can't even articulate that well, I've just developed a set of patterns

Edit; obligatory mention: https://stopdisablingselinux.com/
This is fantastic! Your bash-fu is strong, you bring great honor to our dojo.

This is so cool I dare say I am
feeling inspired!
As was his answer.
I am confused by the query that had the problem. Specifically, I am confused by why the sharding is done by user id.

Even the largest Slack instance probably has under 100,000 users and less than 1000 peak messages per second. That feels to me like it could be served by a single master DB. It feels like that would be a better way to shard.

Major downside is the major difference in shard sizes so some management/migration might be needed but it seems doable to me.

Certainly it feels naively that scaling should be easy due to the way slack instances are independent (unlike say Twitter).
Does anyone have any examples of where SELinux saved the day? I appreciate that some of the time you'd never know, but I am curious if anyone has any real life examples where it stopped an attacker.
https://www.wnycstudios.org/podcasts/trumpinc/episodes/trump...
How does this not breach Slack’s TOS? I thought they specifically prohibited tools like this?

We used slackarchive before but it got disabled because of the ToS. The 10k message limit is specifically imposed by slack to get people to upgrade so they very much don’t want it subverted.
> Comparison of photographs taken of apparent ivory-billed woodpeckers in Louisiana from this study (A, D), with a colorized ivory-billed woodpecker, also from Louisiana (B), and a pale-billed woodpecker taken in Central America (C). Photograph: The Guardian

I've found that boosting the exposure on cameras is a good way to capture detail on birds, branches, and other dark objects, at the expense of clipping skies to pure white. I think it usually doesn't cause birds to become overexposed, though I haven't done much bird photography recently.
In Defense of Friction: making a case for getting rid of your smartphone
They just added live voice chat. (Clubhouse) and have been A/B testing a downvote button. The iOS app just got a UI refresh. I’m sure there’s more.
TV punditry is still a pretty common retirement plan for traditional sportspeople in the uk at least
Lish: A Shell Written in Common Lisp
Nice!

There's a radiator key in the bureau. → The underground has a key to the office.
I appeal to Russia’s soldiers and their superiors
This is well put, but boy reading through that there are so many parts that cry out "automate me" - replacing management with a perl script is likely to be a defining factor of successful companies to come.
It does not. It asserts that Norwegian salmon as a food product does not pose a risk to consumers regarding parasites. It doesn't even talk about pharmaceutical use, chemical traces in the flesh or effects on the environment.

I'm not saying that this salmon poses health risks to consumers. But the Norwegian aquaculture industry does use a lot of pharmaceuticals in the open sea water. And the high density contributes to a high propensity for ectoparasites. Both of these things pose an environmental hazard. (I'm a Veterinarian by the way...)

https://www.sciencedirect.com/science/article/pii/S004484861...

I most want to point out that Norwegian farmed salmon isn't as glorious as it was stated. I'd like to add that this is a predatory species and needs to be fed mostly fish protein to grow profitably. This in turn means the food for the farmed salmon is usually fished out of the sea, too. This is certainly not sustainable and will hopefully be replaced by insect protein (soy doesn't work). But it needs regulatory action, as it is more expensive than harming the ocean...
The Vagrantfile, but otherwise your right.
CS was very popular in the US twenty years ago.