skysight-inc/HackerNews huggingface dataset:
Is the obligation to find a security disclosure contact really on an individual researcher who already did free work for them, or is it on Honda to make it easy? I do not blame them at all.

If corporations deprioritize security, that doesn’t mean we should shift responsibility onto individuals.
Better way is to make a scientific committee, that would declare all side effects (muscle loss, bone density loss...) as totally random and uncorrelated to moon environment. Worked before...
Crypto owners banned from working on US Government crypto policies
Trader Joe's customers enter the chat...

I see a few stores have their evangelists, but TJ's are the most evangelical IME. Other places that seem to have their cults are Menard's and Buc-ees. I've never been to a Menards, living in the southern US, but I get the love for all the others.
I don't know why this good advice is downvoted, and looks like mine will too.

I don't understand why people still consider literature written by human with nowadays language to must be either perfect or it's worthless.

Also how they see a form of government that declared they're adopting one religion teaching and using it as argument proof / point.

We will spiralling down to whataboutism soon like this. Cherry picks the good ones are fine, and people do that everyday. Just don't cherry pick a bad one to justify your agenda and your bad action.
You probably mean the pool quadruples in size, meaning it doubles in length.
In part two we learn that it was all a conspiracy. Behind the growth was actually the universes largest drug cartel and only the Space Force of the United States can save us.
You are attacking the character of someone but can't even be bothered to provide anything to back up your claims? Then why post this in the first place?
Searching for that phrase "Microsoft UEFI CA must be removed from Secure Boot DB" returns a link to a Microsoft presentation at UEFI Plugfest 2016 [1]

It doesn't directly say why that requirement was introduced, though one could gather from the context that it's being done for security. But perhaps more interesting is that both this presentation and the MSDN page you linked also talk about enterprises being able to control what runs on the hardware themselves. Your MSDN page has:

>Removing Microsoft UEFI CA from Secure Boot DB provides full control to enterprises over software that runs before the operating system boots.

... and the presentation has:

>Security Certificates added to my device are documented and justified, with a pre-defined security response plan.

So I wonder if the reason is just "We wanted to make it convenient for enterprises to not have to do a pre-provision step to remove the UEFI CA, so instead we mandated OEMs to not enable it in the first place."

It would be extremely silly if that turned out to be the reason...

[1]: https://uefi.org/sites/default/files/resources/UEFI_Plugfest...
Don't feel bad. Europeans have a much better work-life balance. Plenty of parental leave. A culture that prioritizes life outside the office. Six weeks of guaranteed vacation that people actually take. Etc.

Those things have a price. Namely, when people work less, less innovation happens, which means less productivity growth happens, which means less innovation happens, and so on. I lived in Germany for two years. I absolutely loved it. However, despite its reputation, it's not a place that I would say prioritizes work (compared to the U.S.)
I remain a Clausewitzian at heart. War is the continuation of politics. When the dust will settle, the situation between both side will have been altered in way which couldn’t be reached diplomatically and at this point I think the end result seems more favorable to Russia than the west.
> The facility had about 5,300 employees around that time.

So over 2 notices per employee. It would be interesting to see the distribution.
No PaaS is only the hosting
> many companies are required by security policies

> That's a really rough thing in terms of a human relationship

The security policies didn’t come down from the mountain etched on a stone tablet. Humans thought them up and put them in place.

It’s important to remember and acknowledge that everything we do is the result of a human’s choice.
Indeed we should be paying attention to bees.

Wild pollinators are being assaulted by pesticides and by honey bees outcompeting them. This matters because honey bees do not pollinate all the plants we care about.

Whole regions of China have managed to exterminate their pollinator species, such that fruit trees must be pollinated by hand.
>However I'm starting to think that scripting languages are a false economy.

This is likely more an indictment of Godot's 3D capabilities or GDScript than scripting languages as a whole.
That is highly unlikely. The default configuration with a password includes a verification with the TPM. So the process is like this:
power on -> BitLocker asks for password -> password unlocks the TPM -> TPM does its boot verification -> TPM releases the encryption key -> you can boot into win

If you're on a win home installation the password thing isn't even an option, you just get boot verification and have to retrieve the recovery key from your microsoft account if TPM trips (imo somewhat questionable by MS).
Who knows what else you would have used, or watched otherwise. This is really personal though. I have a hard time parting with things, but I also don't care about them as long as I have them, so I end up being a collector of suboptimal items. This doesn't mean that others are in the same situation.
> you have only one game in town — the workplace — and essentially everything else orbits around it

That hits hard
> why is this an issue at all

b/c I dislike unsubstantiated accusations of "projection", it feels like lazy point making of "no u".

wrt Kovid's communication - it wasn't imperfect communication on Kovid's part, his intent was clear I think. And I responded to the claim that Kovid's only "crime" was some other matter, but he was involved in this flame also.
Ah that's true..
Stellar sized cocoa leaves… Grown outside any Earth based jurisdiction.
Have yet to experience a rescinded job offer but god damn that’s my biggest fear in life. Moving to a new place for a new job and getting royally fucked. Bit less of an issue nowadays with more remote jobs, though.

Just went through this on a move to Austin from Chicago. I was legitimately scared for my life until the end of my first day at the new job. I have savings, of course, but the pressure is still there.
Rejecting human exceptionalism is not the same as saying we are indistinguishable from non-human animals (which would be absurd to argue), rather that our distinguishing features do not make us inherently more worthy.
What? Fuck insurance. I would smash my own window then.
As Jocko says, Good.
Google Censoring Search
As I usually use DDG I was surprised that this link was actually true. Initially thought it was trolling.

I wonder why Google wants to intervene in the results.
The bin packing problem is NP-hard, but rectangle packing is "merely" NP.

However, most people just use a recursive biggest-fit-first ¹), a simple heuristic that is surprisingly hard to beat for most workloads.

I couldn't figure out what Aseprite is doing from their website or documentation, but if it's not that then it might be worth it writing your own sprite packer.

¹) https://codeincomplete.com/articles/bin-packing/
May be more lower level than what you're looking for but my current drug of choice when I want to write all the code is SDL2 and LuaJIT in Visual Studio.
I am so going to use it
amazing progress
If you smear mayonnaise all over your skin like the people around here do, it's bound to cause problems with keeping food down.
Excellent name for it
Notify, Pay, Design System, Prototype Kit and Forms are unaffected by this news.
He wasn't meant to be a role model.
Good reminder to stay with AMD if that’s an option for you.
We're now at the final stage of conspiracy theory damage control with respect to the idea that Microsoft is trying to lock down the PC platform and prevent non-Windows operating systems from booting:

1. It's not happening, I don't know what you're talking about, anybody who believes that has been radicalized by Russian propaganda

2. Well, yeah, maybe it is happening here and there, but it's no big deal, and it's certainly not through a coordinated effort on our part

3. Yes, it's happening, it's been happening all this while, and here's why it's a good thing <-- we are here

We all will have to reckon with the fact that general purpose computing is going bye-bye. The interests of OEMs and ISVs in delivering a safe, consumable experience to end users are aligned against allowing unsigned, unapproved software from running. And yes, the OEMs, ISVs, and probably most of the consumer market will believe that this is a good thing. The next big thing is remote attestation: the internet will simply stop working properly on your machine unless it can prove that it is running an approved OS and application stack.
> Hurdle that doesn't matter at all. If you have the skillset to install an OS, changing a setting in UEFI is nothing.

That assertion is a bit too absolute; I am comfortable installing an OS using the USB installer because I have done it many times. I haven't had to change UEFI settings yet and I'm worried that doing something wrong will lock me out (in case of a botched OS install, I can just start over).
The article isn't as interesting as I thought it would be.

> JWST can produce up to 57 GB each day (although that amount is dependent on what observations are scheduled).

Just use a lot of hard drives? And delete junk data when it's no longer needed.
SEPA is good but not that good. It normally takes two days for my money to arrive, longer over weekends and holidays. The UK Faster Payments system actually does work within seconds most of the time, but only within the UK.
That's very true and correct. An editor at help, makes things more clearer. It's clear and clean...
Second hand markets are also great for these. I recently sold all of my electronics online. I offered them for cheap so that I can get rid of them faster, and even the most worthless piece of junk, an 12+ yrs old, beaten up cheapo laptop with a 32 bit CPU found its new owner for some pocket change.

Not all junk can be sold though, of course. But I think it's worth considering, maybe someone else will find them useful and then they can live on a bit longer.
And how should I take those signs of enlightenment then? If not literally then Buddhist scripture is no better than fiction.
There is a zen buddhist saying "Be careful not to stink of zen". And it can apply both to Buddhism as practised in the west and the east. Its a slightly... provoking saying though, as it may offend other Buddhist practitioners.

Zen Buddhism (from Japan/China) can of course vary greatly from Theravada Buddhism (found in South and South-East Asia). However I would say, that there seems to me much more variety of Buddhist schools in zen Buddhism (Japan) and what they believe and practice than in Buddhism as practised in Thailand, Cambodia etc.

Buddhism is quite fluid even in Asia - but I do think that its right that the Buddhism that is in the west (mostly influenced from Japan zen schools - e.g. soto) came from a more idealised version than is practiced often in the east.

There was an article in the BBC a while back (can try and find if people want) that noted that Buddhism as practised in the west had issues as it promoted a 'cold selfish' side of Buddhism (it pointed to some studies of people that meditate feeling less guilty if they commited a crime). This differed from how its mostly used in Asia where compassion/karmic practice/social works and community are more encouraged.

Personally I wouldn't trust any Buddhist practice organized by a company - the stink of zen would likely be pretty unbearable
In Rust, there is none; they're just not ready, and not used either (there are very few full games written in Rust). The Bevy maintainers in particular give very low priority to foundational functionalities (see 1 frame lag and the unusable stages+states), and focus on advanced ones instead.

There aren't so many alternatives actually (SDL is a very valid framework, but it isn't a game engine), and the choice depends on what's your real goal (experiment or develop a real game). In my opinion, if the goal is to produce a real game, for somebody who doesn't have significant experience, documentation (including: availability of books) is the top priority.
I love it, as long as it worked good, it was awesome. People that were poorer didn't have inferior public health insurance.

That is a system I want to live in. Since the locust capitalists took over (11th January 1987!) it is going downhill though.

Of course I can afford one of best health care, for me, but I want a social system, not an asocial one.
The problem is how to get the data back to earth, no?
Only when MS allows booting "vetted" non-MS OSes _with the same amount of effort_ as it takes to boot MS OSes (like what they do already in other devices) there is any minimal chance of believing this is for security, and not for pure market control.

If they wanted to have a setting to control whether to block non-MS OSes to boot, they could have put THAT as the hard-to-find option, rather than the opposite. They would not have needed to make an entire class of separate hardware whose only difference is apparently that by default it boots MS OSes only, and who knows how is being pushed behind the scenes.
Have you seen Korifi? https://github.com/cloudfoundry/korifi

This is the one I expect to become the primary CF product on k8s
Buddhists are not "people of the book" because the Buddha was not a God, and didn't have prophetic access to the teachings of a God. His views on karma and rebirth, for example, were those of the society he sprang from; they were not the result of transcendent insight. He was not some kind of perfect being.

Buddha became more God-like as the centuries passed; some Prajnaparamita and later texts describe him as being the height of seven palm trees, for example. But he's never been considered infallible, like a prophet.
Biologically there isn't much difference between a man and a post-menopausal woman. At that point the differences are almost entirely sociological.
Humanity has found aminoacids in asteroids. Given enough time and energy, it seems likely to me that structures would form and then evolve in complexity.
“Just want to get paid for doing as little as possible” Ya, no kidding and the employer wants to get as much as they can while paying as little as possible. That’s how it works. It’s Econ 101.

Hiring employees is like buying fruit. You don’t have some right to a perfect basket of peaches.
Spot on. This is a perfect example of appropriation.

---

Cultural appropriation is the inappropriate or unacknowledged adoption of an element or elements of one culture or identity by members of another culture or identity. This can be controversial when members of a dominant culture appropriate from minority cultures.

According to critics of the practice, cultural appropriation differs from acculturation, assimilation, or equal cultural exchange in that this appropriation is a form of colonialism. When cultural elements are copied from a minority culture by members of a dominant culture, and these elements are used outside of their original cultural context ─ sometimes even against the expressly stated wishes of members of the originating culture – the practice is often received negatively.

---

https://en.wikipedia.org/wiki/Cultural_appropriation

EDIT: instead of more stupid downvotes people could bother reading the wikipedia page.
Large parts of GDS already run on AWS, and I think that may even have been the case for PaaS itself.
I got laid off from FedEx in 2009. I had worked there for a long time but most of it was part time and I had just become full time so I was on the chopping block. They made me work a whole shift in the cold with everybody acting all sketchy just to tell like 5 of us not to come back at the end of the shift. That pissed me off the most, getting that last little bit of labor out of us. I got a nice severance package and was able to collect unemployment but it did a number on me mentally along with all the other 2008 era financial nonsense.
What? In denmark, we have:

- Government issued MFA/SSO solution (nemid, now mitid)

- Online tax filing

- Drivers License/Health Card apps

- Secure communications platform (e-boks) for official messages

And thats just off the top of my head. The likelihood that the US catches up to this in any meaningful way is slim to none.
But it is untrue that these devices are particularly secure, especially compared to the average linux distribution. This is Microsoft marketing and nothing else. On the contrary, the case for security is not to use MS systems because one of the largest threats for industry is industrial espionage and a lot of Microsoft components and data retention cannot be audited.

Boot sector attacks have become quite rare and a sensible threat analysis is the basis of good security. Otherwise you could sell any crap as security. Unplugging your keyboard stops a lot of attacks actually...
Placing additional obstacles to installing your choice of OS, even if each one is individually justified, leads to an veritable steeplechase of obstacles in doing so. By placing more and more restrictions on the default, each of which must be individually researched and disabled, fewer people are able to exercise their choice. There doesn't need to be a definitive deathblow if you can bleed away the opportunity to choose.
Looking at that picture I have no idea if that position means that the sun is on or if it will be on when I move the toggle to it.

Your proposal is good, sun to the left, moon to the right, the toggle on the active side.

Or, as the active state is self evident, only a moon button when the light theme is on and only a sun button when the dark them is active. No toggle needed.
and don't care one way or the other

Obviously we do care, otherwise we wouldn't comment. You don't have to be terminally-online to have an opinion about what we should be allowed to do online.
It wasn't that. Ghosts isn't entertaining enough for driving.
Loosely related thread (yesterday):

Does the internet have a 1 star review problem?

https://news.ycombinator.com/item?id=32052666
The most difference is in our cloud service. Previously you got one organizastion within the ZITADEL. In v2 you will get a complete ZITADEL instance with as many organisations as you like. Also the pricing changed a lot. We have a huge free tier with all features enabled.
We also improved how to install and use ZITADEL locally. Our ultimate goal is to get you up and rinning within 5 mins. No matter if in the SaaS or with the opensource repository.
When they started to talk about the gravitational pull of pepsi I knew they couldn’t be serious
Can you renew your driving license online in the US?
I agree. The word "appropriation" heavily connotes an interpretation as theft, and therefore bad. But cultures never exist in a vacuum, there's always cross-pollination, inspiration and adaption of ideas. I see this as a good, rather than bad, thing. Some people make out that their cultural artefacts are theirs, and theirs alone.

But I still see that there is a problem with Buddhism being used in corporate America. It smacks too much of a kind of "spiritual materialism" for want of better words, which is precisely the kind of thing that won't work.

Rather than say "appropriation", I'd say that Buddhism has been "misappropriated" would be an apt description in this instance. I reiterate that words like "appropriation" and "misappropriation" must be used only in rare cases.

Buddhism does have a place in the West, but I'd prefer people to seek guidance from genuine monks rather than laymen who style themselves as "trainers".
Writing is not easy, I see this article struggling after that great opening in the first para
> Namely, when people work less, less innovation happens, which means less productivity growth happens, which means less innovation happens, and so on.

That's quite a stretch. Ask any engineer about having that a-ha moment in the shower, or when out for a walk. Downtime is incredibly important for mentally intense work. Work smarter, not harder and all that. Productivity isn't tied to time spent in office - my experience with american offices is that they encourage people to hang around, spend time there with meals, etc. That's not productive time, that's time spent in the office. Similarly, innovation doesn't come from time in the office, it comes from collaboration, experience, thinking outside the box.

> However, despite its reputation, it's not a place that I would say prioritizes work (compared to the U.S.)

I don't think this is a fair statement. The US prioritizes butts-in-seats, workplaces where you're competing against your peers, system where the power imbalance between an employee and employer is heavily stacked in favour of the employer. That doesn't mean that the US prioritizes work., and it definitely doesn't mean that Germany doesn't prioritize work.
So where are those galaxies? Are they not visible in infrared? Or has light bent so much that those galaxies are not visible?
Yet Germany is the 4th largest economy in the entire world with a GDP of near 4 trillion US dollars, despite being a country of only 83 million people (only the 19th largest country in world). Perhaps the Germans have figured out how to work smarter, not harder...
Fair, that fear can be real, but it does sound rare and I think that's what the user manual is for.

If we take the model the initial blogpost was about it's nicely documented: https://download.lenovo.com/pccbbs/mobiles_pdf/Enable_Secure...
My Daoist teacher doesn’t really mind either way, although his english usage is the “Dao” form. I am assuming that is the more modern/current form.
The so-called free (as in beer) internet is the root of many problems. One should pay directly for the services/information and not route the money through some surveillance capitalist. Why would the internet be different than any other business? You don't go to the shop and just pick whatever you need because you have paid already elsewhere?

Actually the end stage of communism they were supposed to abandon money. With capitalist greed abandoned, people would just take what they need and nothing more. Looks like lot of the internet works like that now. Except that we are not good socialist factory or farm workers but we have done our share by providing our privacy to the maintainers of "free" internet services.

Edit: Actually I feared the link would not open for me with an EU IP because of GDPR blocker. That's not uncommon for US newspapers. However, it just brought up a huge cookie dialogue and showed the article just fine on agreeing.
Allowing the Linux bootloader is a security risk for consumer Windows devices. Microsoft foolishly doesn't enable Bitlocker on them, so the excellent rootkit protection secure boot provides gets wiped out entirely the moment you grab a copy of grub with your own chain loader. This is possible because a vulnerable version of Grub got signed at some point that allows loading unsigned code.

Secure boot should always be possible to turn off, and it should always be possible to load your own keys. I don't see the point of keeping it enabled on Linux if all of its protection can be disabled by editing a file on /boot. It defeats the entire point of requiring higher-than-kernel level permissions to alter the boot sequence.

Linux needs better secure boot key management features if it's serious about making secure boot work. Without it, just turn it off. It's a bit of a pain for new Linux users, but so is every other step of the way.
Don’t know, don’t think they’re in the UK. I’d imagine they are just as terrible as Uber though
Diffraction Spike