skysight-inc/HackerNews huggingface dataset:
Very simple: implement language-specific static analysis backends and a general frontend and vuln management.

Just like every Linux distribution does distributes packages and manages security in a language-agnostic way. Nothing new.

Amazing how people here dismissed my point by downvoting and providing no reasoning.
> We also support the eventual inclusion of a Linux kernel with exFAT support in a future revision of the Open Invention Network’s Linux System Definition, where, once accepted, the code will benefit from the defensive patent commitments of OIN’s 3040+ members and licensees.

I don’t know exactly what that means. But it sounds like something different from “we hereby grant everybody a license to any and all exFAT patents.”
Turn off notification preview on your phone now
Criminals are apparently stealing phones and using notification preview to see 2FA notifications on locked phones. So consider turning off notification preview.
This article reminds me of past audit experiences. It is important to know who to send into the conference room to talk to the auditor. The wrong people can answer too many questions or volunteer the wrong information, leading to more questions and going deeper down the rabbit holes. I suppose the same could apply in this case. It's just a gut feeling.
Obesity has a cause, and people have a responsibility to manage their own health.

But does it really make sense to say obesity is someone's 'fault'? Choices have consequences, but fault requires unambiguous harm.
Your last paragraph is basically the gist of it. Managers who make an impact are recognized as such by their team. They manage the team to do their best work possible.

The model of manager as a babysitter is, I think, what happens when an organization gets to a certain size. Once the organization gets big enough, management becomes a vehicle for bureaucratic surveillance. At that size, an organization uses managers to give a human face to bureaucratic machinations.
> Is it really necessary to keep dragging FAT along?

Anything involving embedded and without deep pockets has no other option, FAT (sadly) still is the least common denominator. Some speak ExFAT, but not sure how good the tooling support is outside of Microsoft, and there are still patent concerns.
In California it's a bit different.

According to 'The Master Plan', UCs are designed for research and post-grad work and some professional careers. Only the UCs give out PhDs (with a few exceptions). CSUs are designed for professional and teacher education and cannot give out PhDs (with a few exceptions). So, as an undergrad thinking of grad school, a UC is a better place to go to as they have the grad labs and classes on campus, while the CSUs mostly do not. Your chances of getting into grad school are a bit higher.

Berkeley, being a UC, is more geared toward research than Chico, a CSU. I mean, Cal even has a nobel prize parking lot.

https://www.ucop.edu/institutional-research-academic-plannin...
FWIW, plywood (OSB, chip board, etc) are already heavily used in house building. Floors, roofs, sheathing, etc.
> Realisticly they almost always will be, but I would have liked to see the panels designed to be constructed a little more simply - you will always have to make changes on site.

I feel this way about the current trend in plant-based meat replacements. I’ll trust the hype about lower carbon footprint, but they take food production further into industrialisation and profit motive territory which was, in part, how we got into this environmental crisis in the first place.
> "No, any production system, even a dev workstation would have IDEs and browsers restricted but their new code or anything else theh need would be permitted."

This doesn't sound like a net positive policy.

> "I suppose the entire non-LSMed Linux/Unix acl system is broken by modern standards."

Hey look, I've worked in infosec too. These ideas you have come with a cost. You're starting to include language, terminology and design choices that are clearly derived from a large one-size-fits-all corporate environment. I've worked with similar environments and I understand why they exist -- but they are not the norm and are certainly not representative of an ideal computing environment (in terms of security, or in general)

> "You only described how badly broken things are."

I described a development system where things can be changed. You're describing a calcified system where safety is imposed by controls and invariance. Those costs are worth paying for some environments but absolutely not for others.

> "Yes but then the attacker would have to tamper with top (if some other security measure permits it) or use a kernel mode rootkit instead."

No, there are dozens of ways to supply a modified behavior in top. If you're mucking with the environment, why not just change PATH? After all, the LD_ variables are just linker paths. This is a very silly thing to fixate on.

> " There is no way outside of an LSM for a developer to say "please don't permit preloading"

Uh, of course there is. LD_* environment variables are just inputs to the linker. You can trivially change the linker to ignore these variables, or behave differently with them, or whatever.

> "ptrace"

Also really easy to limit with seccomp. This is SOP for containers - it's built into docker. It happens by default for most use cases.

> "But allowing devs to declare specific risky features else defaulting to a deny"

Look, here's the thing: There's always going to be a lowest hanging fruit. I know there's a fairly common compulsion in the security industry to point at the lowhanging fruit and say "that's the problem! remove it!" but this is a fallacy. It's just not true.

What actually matters is whether or not the permission model is cohesive and readily understandable by a developer. Locking down syscalls is and stripping features from a containerized app is a great idea in certain contexts. It's a terrible idea in others.

The ideas you're proposing aren't creating strict controls - they're just chasing misbehaviors. This makes a lot of sense for a large organization playing the numbers game, but it cannot lead to a cohesive, consistent, general purpose security architecture.
People don't seem to realize how much the deck is stacked against them in the US. Portion sizes at restaurants are massive and most of the food is shit. You grow up with this stuff, so you get used to it, which conditions you heavily later on. This gets worse if you have parents and friends who aren't conscientious about these issues too.

CICO is not wrong but it's like 5% of the issue. People only lazily argue CICO as some kind of case-closed internet flourish. It's like going up to an NBA pro and going "bro, why do you ever miss, it's just physics"
An app with a dev account signature will not "delete itself in 7 days". You are talking about apps signed with a normal account.
> just obesity/metabolic disease.

yes we don't measure this and is impossible to measure.
Every "Family" doctor has stopped practicing or gone to a no insurance model that caters to wealthy people. You can only get "internal medicine" doctors for primary care.
I've seen waits ranging from 4 months to a year, depending on what your dealing with.

It's also impossible to get a 2nd opinion. The specialists all tend to belong to the same groups so you'll call a different doctor and eventually get shunted back to the exact same doctor you started out with. Where the the competition?
Reminds me of my story: I met a girl in Mexico and decided to quit my job and move in with her. Since I couldn't open a bank in Mexico, I decided I'd just wire the girl all my money. Except upon trying my bank (of America) froze my account and took around 3 months to unfreeze, of which time I had access to absolutely no money.

It's kind of why I find it funny in all the crypto threads watching people here idolize the current financial system. Yet at a whim or some internal AML flag they can effectively trash your life giving you effectively no recourse.
The purpose of engineering management is to create a buffer between the engineers and the a’holes, who, if permitted to manage the engineers directly, would drive them from the company. This is a critical, but not full-time job, as evinced by the fact that most engineering managers are themselves engaged in technical issues.
Same reason people will host and run services around IPFS, BitTorrent, Tor, Matrix, Mastodon, game rooms, and other servers even though they don't get a financial reward, and even though it may even cost them money or their time. They might just want to be part of the network, supporting it in their own way.

The protocol rewards are there to create a stronger incentive, so that it isn't just hobbyists and geeks paying out of pocket each month to secure a multi-billion dollar network.
Growing up, my teachers/mentors taught me not to cite Wikipedia directly for any academic/journalistic works, mainly because most people didn't actually check the sources that article writers were using and there's the risk that there's heavy biases one way or the other because - anybody can edit articles.

Looking at the Wikipedia article you linked, I don't see any definitive, authoritative sources of information that directly links KiwiFarms and these horrible events other than random tweets posted by people on the internet.

After looking through 5-6 different sources cited in the bottom of the article, I don't even see any references or screenshots of the actual website used in reporting, just journalists taking what other people are saying as fact.
Not much.

The net cost of insurance represents 6.4% of all healthcare spending.

https://www.ama-assn.org/delivering-care/patient-support-adv...
I think you're being as disingenuous as TFA.

There are just as many useless managers as there are useless reports. The reason you see so many 'managers suck' posts is because they're in a position of authority over the talent they manage. That's all.

Management shouldn't mean authority, it should be like HR or IT, a support role.
While I appreciate this distinction and is an interesting way to look at things, I don't think it's inevitable. I've never worked at Facebook, but I work for another large tech company. Every project at our company, particularly the ones that deal with personal data, must produce a threat model [1] before going into production. In another thread, someone claims "Well that's because the question is meaningless," but from a threat modeling standpoint an engineer needs to understand all aspects of "where" data is for the system under design. Where physically is it stored? What database is it stored in? And knowing that, one must look at what threats are available. Who has access to the data? What other systems have access to the data? How are those users/systems authenticated? Is that access logged?

Now, sometimes systems diverge from the design, and sometimes threat models are incomplete. But the exercise of generating a threat model makes understanding who manages data more manageable.

[1]: https://en.wikipedia.org/wiki/Threat_model
It was a private student loan in the 90s with no asset backing it. I was in school so did not have to make payments at that time.

The truth is I should of never of been given the loan as my parents had very little income and no significant assets. It was ridiculous. But I was lucky enough to finish my degree in CS so eventually I was not poor and paid off the loan. But even with the CS degree and diligent saving it took almost a decade.
(I'm the author)

The overall idea is that as you become more senior in an organization, your job is increasingly to be a general problem solver for the good of the entire business rather than a localized problem solver for your particular area of ownership.

This often means doing things outside of your comfort zone. For a tiny example – if you're one of the most senior 5 engineers at your company, or if you're a VP Eng, you might need to get on the phone with an upset customer or hop in to help lock up a strategic partnership. This stuff might feel like it's not your problem, but it is, and helping to get this stuff done will help your career.

The reason that I brought this up is that when you're in a less senior position in the organization the route to success is often the exact opposite of taking this total-business pov.

If you're an engineer with 4-5 YOE and you're constantly helping out the sales team, it's probably not going to help your career because your career is primarily determined by the quality and speed of your code writing abilities (it might be really helpful to the business overall, and maybe non-coding activities should factor into eng career paths more, but that's a separate conversation). So as you get more senior it's common to need to shift one's mindset.
Guy Shows Off a “Military UFO” from a Publication for US Defense Personnel
I thought everyone had this turned off already
That's like saying if I go and paint my house in leopard stripe paint that since my mortgage isn't going up the only cost to my net worth was the cost of the paint + labor.
Sony started by selling electrically heated cushions: https://www.sony.com/en/SonyInfo/CorporateInfo/History/SonyH...
> The end result of this is that all the existing generic scanners just use least common denominator heuristics

Wrong. You can have specialized backends and language-agnostic everything-else.
Ideally Julia would have a WASM backend, but that is one that would require someone to put a bunch of time into it.
We had a hard time finding this data when experimenting with carbon aware scheduling in Nomad. There seem to be a lot of orgs working on this, but it’s all third party as far as I know. I couldn’t find a first party (eg Amazon, Microsoft, Google, etc) that provided this data via an API. Very frustrating.

There are a couple resources linked here: https://github.com/hashicorp/nomad/blob/h-carbon-meta/CARBON...

The silver lining is that the folks who are working in this space are extremely friendly and passionate in my experience. Don’t be scared to “contact sales for an API key.” The few folks I talked to were extremely helpful.
I don't think he meant largesse did he? He seems to mean "large size."
> (Raising Cane's does this as well, and their chicken is better.)

Hard disagree.

I've never had chicken that is rubbery/contains a tendon from CFA, it's basically guaranteed to happen every time I try Cane's, to the point where I've basically stopped eating there.

It's a sign to me that they only go "skin deep" on quality, because it's not "inedible" but while you're eating the last thing I want is a bite of it to be rubbery and fall apart in my hand because of it.
I have discussed this idea with friends who are writers / artists. Call me a cynic, but while many writers / artists aspire to collective shared knowledge, the reality of both the writing and art market is that unique knowledge is an important differentiator and an asset to their careers. If you do find a fascinating, rare 19th century travel journal in some online archive the last thing you are going to do is share it with others like you until you're sure that you're not going to use it as material yourself. The exception to this being other writers completed work (ie long-form articles, books), but that probably doesn't need a focus on writers / artists per se and a more general "aesthete" HN might work better...
No thanks. We need less meetings, not more.
One of my least favorite things about being on the technical side of things is this overarching smug sense of superiority that every other role is bullshit and doesn't do anything of real value. Or that other roles are malicious and/or incompetent and if engineers got their way the product would be perfect and free of defects of errors. e.g: "Don't blame the developers for X, we only put it in because of product or sales!"

Well product or sales probably don't like stuffing the product with ads, they only put it in there because you like collecting a paycheck every month.
Nope. They most typically result from the fact that "you mostly can't learn business or management in school," period.

There is no meaningful correlation between title, schooling, and/or effectiveness in management.
Isn’t that true for everything though? More bad devs exist than good one? I guess a manager could make the same claim that devs are making his life miserable.
How is a thief taking thousands from London gym-goers?
Ransomware gang hits second-largest US school district
> The equator of the Earth is spinning much faster, on a much tighter radius.

Centrifugal force is proportional to the radius, so a smaller radius actually decreases it, for the same angular velocity. The reason we associate smaller radiuses with increased force is actually because if the energy stays the same, reducing the radius increases the angular velocity (like in a pirouette), which then “feels” like a stronger force.
Midwest, large city; pediatrician is same day, Allergist same week, Developmental Pediatrics was 4 months, Pediatric Ophthalmology was a year, it really varies. I'm lucky to have all these specialities available, people drive 2 or 3 hours to use the Midwest Eye Institute.
The core problem sounds like the bullshit paperwork you allude to which is unnecessary and adds time to projects but provides leadership a fake status used to drive other decisions.
My dad has been ordering green tea from a particular seller for maybe 10 years now, in part because they include a lovely little handwritten note for each order. It is absolutely comparable.
Notification preview when screen is locked. That's a setting in Android, don't know if iOS has something similar?
As a fork of the community from Stack Exchange, there's also https://writing.codidact.com
Cyberattack brings down InterContinental Hotels' booking systems
In a well oiled org managers aren't needed. I know it because I've been part of one. It needs specialised skilled workers i.e., product owner, product designer, project manager, and engineers. There'll be a tech lead among engineers who will be point person for the project manager. That's it. At the top you need execs or business heads liaising with product owners and/or project managers.

Managers however become essential when this well oiled machine is thrown off by a sudden expansion of the team or when there's a chronic uncertainty about the work that's going to happen next month. Then you need whose who are good at navigating this chaos through networking, politics etc., to get the work done as well as making sure the team survives should the axe fall.
Two LGBTQ Activists Sentenced to Death in Iran
Stealing private keys (through whatever means) is considerably easier than stealing a comparable amount of mining hardware then running it. It's not that big of a risk in reality of course, but there is still a considerable amount of security provided by the fact that obtaining enough compute for a 50% attack is harder than obtaining enough eth to do the same.
I'm guessing they took a hit to margin, but even if you take the margin to 0, you're still not helping. Most companies who are in the business of importing/exporting goods are going to be in the sub 10% range. When shipping prices go up like they have, you're literally off by an order of magnitude. Single digit margin cuts isn't going to make a dent.
While there may be an underlying cause exacerbating the issue, I still think most people's obesity (and being overweight) is almost entirely on poor lifestyle choices, and refuting this is mostly a coping mechanism.

I'd be willing to bet most people (even those in shape) underestimate their calorie intake and overestimate their energy expenditure, unless actively logging it, and these small differences gradually add up.

I've lost 10kg since June (starting from a healthy weight of 75kg), and my special method that doctors don't want you to know, is calories in, calories out. I track food in, and I track exercise.

Even if my weight is being influenced by microplastics or something else, I believe everything is still within my own control.

I do think that in an ideal world, junk food (including alcohol) would be treated akin to cigarettes, with bland packaging . featuring health warnings, and a carpet ban on being advertised.
Cybercriminals target games popular with kids to distribute malware
Semantic merge is no longer available? :(
The main goal to staying employed as one is to push down priorities from above.
Just to follow up here, it turns out that there may be a way to detect if a peer connection is direct or relayed: https://stackoverflow.com/a/53138581

I'll try to surface this information to the user!
> I'm sure there are plenty of people who would like to use cocaine every day

There are plenty of people who do use cocaine regularly, and a lot of them are celebrities.
I like to think that management is a noble profession if done right. I've seen a handful of examples over a 10+ year career thus far.

You get to empower people to be better versions of themselves everyday. What other job allows you to do that?

The reality however is that most EM jobs are in fact bullshit jobs. They usually have people who are simply managers/operators, not often leaders nor coaches. To summarize a people manager's job, it's two main things:

1) Get results

2) Grow & retain your people

The challenge is that many EMs are also "assholes" so both of these goals are hard to accomplish. They fit into an asshole category in itself:

- political assholes master the art of corporate politics but do nothing but take credit for everyone else's work.

- controlling assholes micromanage to the point of strangling creativity and joy out of their team while taking credit for others creative ideas and call them their own.

- asshole assholes are mean, jealous, and insecure jerks who find ways to lie and manipulate others for their gain.

- mission-driven assholes are people who are crazy passionate and trample over how things are "done around here" to see the mission succeed.

Note: I use the term "asshole" in reference to Tony Fadell's book "Build". It's a fun way to think about it.

Most engineering teams tend to optimize for the incentive of the engineering manager, not the whole team. It's winner-take-all. The good EMs are the ones who see through this and ensure their whole team is empowered at the potential cost of their own incentive. These EMs usually win-win in the long term.
Do you feel like papers should have separate derivations & proofs of correctness? The second one requiring correctness (intuition being secondary), and the first one being intuitive (rigor being secondary).
“50% of all workers below average”
> sit in meetings all day that had zero impact on our work streams

maybe the manager was busy in meetings all day in order to ensure you had zero impact on your work streams :)

the role of an EM in a large organisation is in large part to be an "enterprise abstraction layer", ensuring the people in the team(s) can work in a way that is as close as possible to what they could do in a startup/solo project
OVHcloud opens up Bring Your Own IP service for IPv4 failover
> I don't know how this still bears repeating in this comment chain - IA still has the site archived, just not publicly accessible.

Because if it isn't publicly accessible it functionally doesn't exist, and what remains is a number of publications of questionable veracity.

Perhaps law enforcement will eventually be able to comb through the data, but there is no guarantee the general public ever will be able to.
The power dynamic is completely different. Managers have the ability to hire/fire, guide technical decisions (usually for the worse) and set the tone for the team since its "their" team. The team itself has very little recourse over a bad manager.
Mores law is specifically about transistors:

“Moore's law is the observation that the number of transistors in a dense integrated circuit (IC) doubles about every two years.” https://en.wikipedia.org/wiki/Moore's_law
> it will probably affect your health

Is it really that bad? I hear mixed views here.