skysight-inc/HackerNews huggingface dataset:
Going through SOC2 as well, I have a similar experience :)

> I was surprised by how important this was to our auditors. If they had one clearly articulable concern about what might go wrong with our dev process, it was that some developer on our team might “go rogue” and install malware in our hypervisor build.

> ... our auditors cared a lot about unsupervised PRs hitting production.

It's indeed a growing concern, and (shameless plug) the main reason we founded arnica.io (help organizations automate that process without hurting development velocity)
Insurers aren’t properly internalizing the liability costs and therefore are pricing premiums too low for the risk these vehicles create. Maybe judgements need to be higher for deaths and injuries caused by overweight vehicles? I don’t have enough context to say. If they’re significantly more dangerous, it should be priced accordingly (based on claims data).
Seriously. I wouldn’t be surprised if the lowest total comp was in excess of $200k/year. If you can’t have 6 months in cash sitting in a high yield savings account on that, there’s no amount of severance that will help you.
Right. There are also "forces" like management who want the project to be finished yesterday.

Another metaphor I like for programming is Chess. Any line you add to the program constrains its future development, becomes "weight" or "force" that pulls your development into some direction. Sometimes you have to sacrifice features like pawns. Sometimes you may sacrifice security, you may think it is secure enough. The outcome of this game is often a draw, or stalemate. And the same game can continue for years.
What's the concern with commercial real estate?
Care Thread (http://www.carethread.com) provides secure mobile messaging and team-based collaboration solutions for healthcare providers in hospitals. Care Thread's mobile and web apps deliver real-time information detailing patient status and treatment to every member of the care team, addressing communication gaps to eliminate unnecessary costs and reduce medical errors.
Our products are built around a real-time messaging and notification framework, using tools including React, Go, and PostgreSQL.
We're looking to expand our team by adding web front-end developers, mobile developers for iOS and Android, and back-end developers, as well as a system administrator who's comfortable with AWS and PostgreSQL databases.
If you'd like to build the next generation of healthcare software, please contact us at jobs@carethread.com.
It’s amazing we’ve reached the point where that’s possible.
Why do you think they were paid to do this?
The invasion of Ukraine has shown precisely the opposite: playing military games gets youe neighbours antsy, and an antsy empire just invades to calm its nerves.

If Ukraine hadn't been slowly de facto integrating into NATO (NATO weapons, NATO training, and even joint military exercises with NATO, on Ukrainian soil), it would have been much harder for Putin to justify the extreme costs this invasion is having on his economy.
I used to be a naval officer in the Dutch navy, this is the type of capability that we would love to have. It was always a mess to divide satcom bandwidth between operational and recreational purposes, so if we could put all non-essential traffic on Starlink (for only 5k/month/ship too!) that would be a huge win and free up massive operational bandwidth on the more serious satcoms.
Quite probably only if we're ignoring the z-axis (depth), at least when talking over minerals. I think it will be a game-changer if a few km of rock won't be a hindrance anymore. If that ever comes, that is.
Interesting I didn’t know that. Some part of the kernel was fucked for sure as even the hardware sleep button in my keyboard didn’t work but I guess if the display driver was functioning that would be all that was needed.
phased array antenna, so its either a software switch or they simply detect if your station moves too much without paying for the privilege and disable/throttle you.
This is the same company that wasn't aware that LD_PRELOAD has been in use since the 90's in their last post. Here is that unique method of hijacking execution flow using /etc/ld.so.preload, 20 years ago: https://seclists.org/incidents/2002/Jan/86. None of this is unique or novel, including replacing the loader. LD_PRELOAD rootkits have severe drawbacks (which are not an issue for eBPF rootkits).
I don't know how well Walmart or other retailers would do without their (centralized?) logistics "cloud".
I had the same experience... I ended up wanting to make sure my locale isn't using this software, and not sympathizing at all with this professor.
Wired isn't responsible for or concerned with educating people about the US constitution. Here's how they describe themselves:

"WIRED is where tomorrow is realized. It is the essential source of information and ideas that make sense of a world in constant transformation. The WIRED conversation illuminates how technology is changing every aspect of our lives—from culture to business, science to design. The breakthroughs and innovations that we uncover lead to new ways of thinking, new connections, and new industries." [1]

[1] Bottom of the page https://www.wired.com
If those externalities were priced correctly, people would stop buying big cars. That’s why they’re not.

This is the sort of things governments can be good at if they choose. Otherwise gas/energy prices will eventually do it for us. And it won’t be pretty.
Nice, given the format, is the plan for this book to be continuously updated if needed?
Seriously. They are working for a huge name-brand tech employer, and have the best chance of getting a new job (see the LinkedIn replies), but oh yeah, if they run out of severance, and have no emergency fund (because reasons), and their shares are temporarily locked up, whatever will they do? Take out a 401k loan like a plebe?
https://blog.cyberclip.com/world-population-by-time-zone has a plot of population by time zone; I can't find numbers.

Some quick guesses:

- the most people are awake at around 14:00 UTC. That's 23:00 in Japan (the easternmost big population, at UTC+9 - sorry eastern Australia!) and 6:00 PST/7:00 PDT; most people who would be sleeping are in the Pacific.

- the most people are asleep at about 22:00 UTC - that's 23:00/00:00 in Western Europe (depending on the season) and 06:00 in China, so you get those two big population centers (and India in between them) sleeping.
Call for pricing is usually B2B. Best case they want a salesperson to twist your arm, worst case the price is as much as they can squeeze out of you. If you ask why they waste people's time like this they'll say they're actually delivering maximum value. It's dishonest and archaic.
Of course most immigrants are law-abiding and good citizens. I think most of us know that.

The challenge is that this specific group in this specific location has an outsized number of people that are aiding terrorist organizations.

It is pry worth trying to figure out why. But also, it would be irresponsible if our govt didn’t allocate resources to try and stop that.
> My daughter was made to create instagram account and an a porn one.

I'm missing a step, here....and I suspect a few others are as well.
The broader metropolitan is not usually what people consider as NYC. New York state maybe
You fell into the same trap. You linked 2 studies. Other side could link 2 studies with very different conclusion. We should understand it is fundamentally a political issue, and both side shouldn't hide behind 2 links to support them.
This seems like an exercise in futility. Robotic killers don't need to be sophisticated or expensive; writing international law is largely useless when the technology isn't limited to nation states.
Agreed.

It is perhaps necessary to be completely comfortable with the surroundings. To those who have not found complete comfort with nature and would be concerned about things like twisting an ankle ( as if you couldn't do that on a curb or broken sidewalk ) it may be difficult to enter this mindless state in nature.

What is very odd about the absolute focus on _in the cities_ is if you were to switch that with _in the desert_ or _in the hills_ or _on the mountain_ the feelings the article is describing are very similar to the sense I have when I have actually left it behind and am now 'lost' if you will in my surroundings.
>Bottom-line: SOC2 is a weak positive indicator of security maturity, in the same ballpark of significance as a penetration test report (but less significant than multiple pentest reports).

Having gone through SOC2 a few times, it's more about opening doors to enterprise customers. The audits are very "grey" and subjective to your compliance auditor. Also, you get the freedom to say we're working on this and it allows you pass certain controls.

One final note: watching our CISO go through this I realize it's utterly the most boring, soul crushing job I have ever seen. It's non-stop clerical paperwork that nobody will ever read but everybody demands to cover their ass. Pay your CISO's.
They would certainly be leaving a lot of money on the table if that were true.
I don't think "deaths per TWh" is the only measure we should be looking at, though. The Chernobyl exclusion zone is around 1000 square miles. It's certainly arguable if that is the correct size, or how long it will need to be in place.

If you shut down a coal plant, the pollution dissipates in a fairly short amount of time. (Unfortunately the same is not true of the carbon that has accumulated in the atmosphere over time.) If there's a disaster at a nuclear plant, some amount of land area becomes uninhabitable for some long amount of time (amounts dependent on the severity of the disaster).

For the record, I am in favor of building new nuclear plants, especially in areas where they can replace coal or even natural gas (it's absurd that this EU parliament action is considering natgas "green" as well). But let's not pretend that they are 100% safe, that the worst case can't happen, that the effects of a nuclear disaster aren't that big a deal, or that we've solved the waste disposal and storage problem. I agree that many anti-nuclear folks are driven more by overblown fears than science and statistics, but pro-nuclear people seem to also cherry-pick stats to better support their position.
$5000 a month? That's pretty embarrassing, isn't it? That indicates they aren't doing satellite-to-satellite and are using some kind of specialized hardware to simply send the signal to coastal satellites from farther away.
Could this be implemented with ::before and ::after pseudo elements on a parent element?
These vessels still have people on board who want to watch YouTube.

This will be amazing for retaining crew while sitting at anchor outside of Panama for day 27 of who knows how long.

You can prepare for a 7 day cruise between ports when you're going to be pretty busy anyway. The madness of seeing land and not being able to do anything for weeks on end is hard to describe.
So, what changed in regards to dealing with its waste in the two decades? Or do you simply not care enough anymore?
> Ukrainians would have been much better off had they worked with Russia to avoid or quickly settle the war, especially after heroically successfully resisting the blitzkrieg-style initial invasion.

By that logic wouldn’t the Russians be much better off if they had worked with the international community to avoid this war as their industrial base is crumbling around them and they are losing massive amounts of manpower?

Russia could take Ukraine today with no more materiel losses and they will be worse off than when they started. The only way they could consider this a win is if they consider ideological reasons, but if you include those you can’t say the Ukrainians would be better off if they value freedom more than they value staying alive
This is a very good article, but it should probably have (2017) in the title.
Think again.

Read with understanding.

What is really the question that is asked?
I think I had it confused with waypipe.
Roblox is not the predator. There's a learning opportunity for discernment here, if you child is mature enough for that lesson. If he's not, well, play with him to the extent you have the time.
It seems to manifest in all kinds of ways. I got it a month ago (double boosted) and it was the worst illness I'd had since a big flu bout ca. 1990. Not fun. My symptoms were clinically mild, but were total ass-kickers.
Job market is definitely not "hot". I think there are still jobs out there but lots of companies are tightening up severely.
It's on the same frequency so Dish's terrestrial cell towers would presumably overwhelm the weaker signals from Starlink satellites.
That's what I was expecting. Makes me think I might've caught one of the new variants. I'm quite fit and healthy, so I don't think it's a matter of weak immune system.
Could you share a screenshot? I don't see pricing anywhere on the page, though near the bottom it says "PAY AS YOU GO". Likely geolocation, though I'm curious what I'm missing.

EDIT: used VPN.

Canada version: High-speed, low-latency internet with up to 350 Mbps download while at sea.

US Version: High-speed, low-latency internet with up to 350 Mbps download while at sea. $5,000/mo with a one-time hardware cost of $10,000 for two high performance terminals.
> That might mean that they plan to enable inter-satellite links then?

Or maybe they'll have stationary ships with "ground"-stations until the inter-satellite thing is working.
Chasing Ghosts: Unlocking the Mysteries of Human Hibernation
I've accidentally walked through a few "bad" neighborhoods while traveling and mostly found them just fine. I think the thing is that they might be fine to travel through once or twice because the odds really aren't all that high you'll get mugged, but if you travel through there every day of your life because it's where you live, you're much more likely to at some point have witnessed or experienced first-hand the violence. So it's understandable that locals might steer you away, even if it's still not especially likely that you'll have a bad experience on the one time you pass through.

That said, I often get poor advice from wealthier residents of "dangerous" cities, because they tend to sequester themselves from the poorer parts of town and think it absurd that any traveler would want to visit or pass through. I suspect in that case there is some kind of classism or other prejudice involved that as an outsider you are immune to because you didn't grow up in the environment that produced it.

Either way, although locals can provide you with some data points, I think ultimately when you're traveling you have to make your own risk assessment based on the situation. And this is true whether you are in a city or the countryside - I think it's an awareness that most frequent travelers develop over time.
What's wrong with military purposes and how do you know what exactly it will lead to? If anything the most effective weapons lead to deterrence at best and cold war at worst, actual war are fought with ak47.
I will need something like this in 12 months. Can you add me to your CRM to reach out in a year please? Find me on linkedin, thank you!
Every link I click on opens up a new frame in the current window. Can't move them around, or focus, or anything. Whatever js rendering it is is either a bizarre design choice, or just plain broken.
Ah yes. Appeasement. Always a winning strategy.

Ukraine has had its own independent culture for thousands of years. Russian propaganda doesn't erase history. Russia's ultimate goal is to erase Ukraine.

What's the compromise between "you need to stop existing" and "we exist", again?
Wow they are now clearly selling a product that depends upon starlink 2.0 satellites which depend upon starship for launch. Starship tests haven't even attempted a static fire on their launch platform let alone a stacked launch attempt.

Not to mention, their launch calculations include re-use based upon a completely invented and also untested catching apparatus.

Talk about going all in...
I've heard this expression used in the context of teams of people working on a project, but not in terms of entrepreneurship. I've heard a very smart principle engineer claim he would rather have a team of non-experts with the right attitude than a team of experts with the wrong attitude, essentially saying he'd rather work with a less knowledgeable team he likes than a team of very smart people he didn't. I'm not sure if this sentiment transfers to the realm of business management, where there are probably fewer opportunities to "learn on the job" and mistakes are more likely to be potentially ruinous to the overall enterprise.

I think it's probably best to take this saying with a grain of salt. Is attitude important? Definitely, in the context of team cohesion and morale, but you don't want a bunch of dunderheads on your team no matter how loveable they are. In terms of business leadership I'm iffy on how much a good attitude can do for you in lieu of experience and knowledge.
Right, if big vehicles are more dangerous, where is that uninternalized cost being squeezed out if not the vehicle owner’s premium.
The princess and the pea is pretty obviously an observation on how upper-class ladies tended towards high maintenance... It's pretty funny as an adult, I thought it was pretty lame as a kid.

I highly doubt that fairly tales from the West, which had a strong Christian tradition and no Indian influence (as far as I know) until the 1600s at the earliest, would have any Indian spiritual ideas, though.
Elon Musk's deal to buy Twitter is in peril
Co-sign.

You can run a SOC2 compliance program earnestly or as a check-the-box exercise.

If you're running earnestly, I would argue that the hardest thing about a SOC2 is ensuring that you stick to your guns on approaches that work for you and not adding cruft that you don't care about. If you let the latter happen, you will invariably end up a box-checker, and being a box-checker eventually contaminates a robust engineering / security culture.

And it's hard to walk back more restrictive / cumbersome policies; if you delegate your SOC2 to a person who doesn't deeply care, they'll eventually agree to put ClamAV on all the hosts or something (to make the auditors go away) and then you're going to be stuck with that for a while.

(So you need to find someone who has enough business context and good judgement to run the process, which is super painful from an opportunity cost perspective at a startup, and hard to locate at all at a larger company.)
Appeasement has been tried before, to great loss.
Weight is a confounding factor if an accident does happen, but the biggest risk that insurers deal with is the driver and the environment in which they operate their vehicle.

Attributes like weight or type about a vehicle have relatively vanishing impact on risk in reality. https://www.iihs.org/ratings/insurance-losses-by-make-and-mo...
nobody here is talking about freight vehicles
There clearly is a line where we don't do projects if the tail risk is too high, just like you wouldn't build a house next to a volcano that is known to violently erupt every year or decade--if it's every 1,000 years, it may be a different story. The question is which side of the line nuclear energy is on.

I basically agree that it's on the "worth doing" side given the right conditions are met. These conditions plainly weren't present in the USSR in the Chernobyl days, and probably aren't present everywhere nuclear plants are operating today either, but that's not a reason for a blanket anti-nuclear stance given its many benefits.

My point is simply that comparing historical results isn't relevant to the tail risk discussion. Pro-nuclear people should stop using this argument imo--it makes it seem as though they don't understand the position they're arguing against.

Sidenote on nuclear weapons: my sense is almost everyone does agree that the tail risk of a disaster is unacceptably high, but because game theory makes a drawdown extremely difficult, they're considered a grim necessity. If we could somehow destroy all nukes simultaneously and make it impossible to build new ones, we'd increase humanity's odds of survival quite a bit by doing that.
> We all know the answer, it's always money.

Maybe for you. Most of the time there are other variables when choosing your job (EE here).
This same logic could be used to justify any atrocity. What exactly makes you so sure China is developing such dangerous technology?

And even if they are, why isn't it a better idea to negotiate an international ban on this type of research instead of driving full force into it?

Creating ever more powerful weapons is a fool's game, and every knowing participant is a human monster.
The margin of error is 5.8% I.e. the majority could also be in favor of abortion access. And even if we concede most want it gone, a slim majority does not in any way mean it should be denied to other people. We also need to define “most,” that’s a bad phrasing of the question IMO. For instance, we banned in cases of rape or incest. I’m sure plenty of people who are otherwise against it make a provision for that, but the question makes no distinction about some of those more divisive situations.

The GOP controls this state in a wildly disproportionate way. They passed it because of that, not because of a possible slim majority. We’d have legalized weed if that’s all it took.
Going to need a bigger boat.
Is it surprising that highly compensated employees also value security and other benefits?
No, we also have the option to go all-in on solar and wind power, and avoid both of those bad outcomes. Of course, solar and wind aren't perfect either, and have other problems that need solving (energy storage for nighttime and dark/calm days, for one thing), but "nuclear or fossil fuels" is the falsest of false dichotomies.
I was checking it out, but it seems limited in terms of the type of models you can implement. You don't have CNNs for example.
Probably something to do with different currencies.
If a user reports a regular cycle then reports no periods for a couple months then resumes a regular cycle it could be an indicator that the person was pregnant and their pregnancy ended. That information then could then be used against them to accuse them of having an abortion.

It doesn't matter in the end if the person had a miscarriage, had an abortion, or was never pregnant in the first place - it could still be used as "evidence" if someone wanted to go after them.
You've discussed why a zpool account has a relatively high minimum in the past [1]. Basically because you need a persistent isolated vm/bhyve with sshd listening on its own ip and separate zfs and zpool for each customer.

It's still fuzzy to me specifically why a dedicated 'vm' is necessary. You don't need a dedicated ssh ip for normal 'shell' accounts, and certainly you still provide security and privacy for these customers. Is it because zfs doesn't have fine-grained permissions to allow doing zfs send/recv actions on one's own datasets/volumes without also giving access to other customers' data? Or is it because send/recv workloads just consume more compute resources in general?

[1]: https://news.ycombinator.com/item?id=27994369#28000100
A tqbf blog with a link to a blogger agreeing with a Matasano blog about not liking agents? I smell a reference loop!
The Dolphin team is comprised of volunteers, and a single guy was supporting Windows 7 up until a little while ago presumably for personal reasons like lack of time. I don't think the Dolphin team can really be put at fault in good faith.
> The money they need pay bills and keep them afloat if and until they get new employment.

How will these people that were making well into six figures possibly survive?