skysight-inc/HackerNews huggingface dataset:
My software engineering and sysadmin background overlapped a lot with security, and I found flaws and recommended security solutions at every company... so I pivoted my career to full time security engineering for multiple companies. I eventually saw enough massive oversights and targeted attacks to operate as though any person or system that lacks strong accountability for their every action is compromised.

Most companies can not afford to meet this kind of zeroish-trust threat model, so I moved to roles in fintech companies where they -must- think this way as they are highly targeted.

I realized though the highest value I provided to employers in addressing security problems happens in the first few weeks, then spot check pentests and advice a few hours a month after that while I build tooling. I also got tired of writing internal-only security tooling and practices I knew so many companies really need. I concluded the only assured way for me to be able to open source my tools and practices and get them refined by collaboration and exposure with a lot more organizations was to start a company with that mission.

I founded Distrust and my full time employer at the time graciously agreed to be my first part time retainer client. Turns out, many companies want pentesting and full stack security consulting retainers where someone can integrate into their team and help architect practical solutions unique to each company. Even companies with their own security teams benefit from a part timer with a perspective on security problems and solutions at many other companies with similar threat models.

Word of mouth has kept my schedule full enough to raise rates and justify building a small team last year. Best career choice I ever made.
People need power to live through winter / cook. Russia cutting off power can cause death. Cutting off tiktok may push a few emos over the edge but not really comparable.
Any modern iPhone has its battery held by pull tabs (double sided tape that lets go when you pull on it sideways). They are sometimes PITA to remove but you just need tweezers, fingers and bit of luck to remove it :-)

Adhering the battery is the same - just press in place.

Heat is only needed for opening/closing the phone.
Pretty sure he just passed the torch off to someone else (without selling it) because he was tired of it, then continued development shortly aftwards as "ublock origin". uBlock itself (not origin) got sold off the Adblocker Plus and allows some ads.
> But to an casual observer, what makes a rally a "nazi rally"?

A combination of Nazi-style iconography and right wing/reactionary rhetoric. I've yet to see a 'left wing rally' in the US but I suppose that could take in center-left rallies by politicians like Bernie Sanders. And people do label such events as a bunch of commies.

I'm not sure what you have in mind with 'Bolshevik rallies'. I can't think of anything visually distinctive about historical examples, and when I think of Communist party events I think of very formal affairs in auditoriums as you might see from China or North Korea. I'm having trouble imagining an American equivalent.

> You don't see the problem here? You just equated "right wing authoritarianism" with "nazis" and "fascism". What does "right wing authoritarianism" mean, anyways?

If you're struggling with very common political theory terms used in a wholly conventional way, perhaps you should consult a dictionary instead of asking me to stand in for one.
I don't think you need to limit the number of calculators to the number of cores. You can just store the history/results somewhere on disk or in memory. Which core doing the work when you press '=' doesn't really matter in this case unless you're load-testing this calculator.
You chose to buy it knowing that's how it works. As a user I find this an extremely compelling feature that my phone is close to worthless to anyone who would try to steal it.
I don't see why domestic private companies holding such a power is any better.
For the last year or so all the houses I've seen come up were bought by a flipper one month and then the next relisted it for a 100k on top, nothing done.
I admire Chaudry but Undisclosed was just a little too much for me. Obviously, dismantling the faulty cell "ping" evidence was great work, but a lot of the content and theories seemed to veer into "throw everything but the kitchen sink at em" territory.

But obviously there was a post-Serial audience and hunger for that kind of focus. Serial may have been the catalyst that brought huge national attention to Adnan, but Rabia et al. deserve top credit for being faithful and persistent advocates all these years.
he didn't sell it, he wanted to stop development and gave it to someone else, who turned out not to be trustworthy, so he made uBlock Origin.

uBlock Origin Lite/Minus are a response to googles manifest v3, which will be mandated soon, taking away some of the APIs needed for uBlock Origin to stay as effective as it currently is. So this is basically a neutered version of uBlock Origin, because the original version will cease to be able to exist in its current form on chromium (but not firefox)
> Thus CCP can influence our elections.

Would it make any difference if it was a US owner? The real problem here is more basic: 80B americans have 20% of their free time centrally controlled. This a health and social problem, whoever owns the corp.
but does it run on the GPU?
I like that.

Yeah, hard to imagine people like R. Crumb (or Ed "Big Daddy" Roth, others) worrying what the hell Twitter thought. Some artists (lets add Frank Zappa?) would probably have relished the publicity.
Yikes. Other users have pointed out a bunch of things already but I need to add that this sort of name-calling and personal attack* is against the rules and spirit of this site, and is the sort of thing we ban accounts for. Regardless of how right you are or feel you are, please don't do it again.

If you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting to HN, we'd appreciate it.

* especially against a new user—greeting newcomers with a torrent of abuse is really bad
> it should be low-hanging fruit for a US-based provider to offer a competitive product.

It was called Vine, and we let our monopolists buy it and shut it down.
Sorry, that's what I meant — your willingness to defend yourself is why they showed up.
I once worked on an app where the staging database was used for local testing, all devs used the same shared credentials with write access, and you switched environments by changing hosts file entries (!!!). This resulted in me accidentally nuking the staging database during my first week on the job because I ran a dev script containing some DROPs from my corporate Windows system and failed to flush the DNS cache.

I had already called out how sub-optimal this entire setup was before the incident occurred but it rang hollow from then on since it sounded like me just trying to cover for my mistake. The footguns were only half-fixed by the time I ended up leaving some time later.
We weren’t expecting 35x speedup. The difference was pretty surprising.
> Mercator projection but for the opinions of people who don't touch grass

I wasn't sure what you meant by that. Now I'm really confused:

https://grasswiki.osgeo.org/wiki/Projection
> As a general rule, the sharing occurs only as compelled by lawful court order.

"Lawful", sure, in the sense that the secret FISA court approved it, and while that's blatantly unconstitutional the supreme court decided that no-one has standing to bring that case unless they can prove that they were themselves being secretly surveilled. I bet everything that TikTok does is lawfully compelled as well.

> Goog/FB don't really have a choice in complying if they want to continue to exist and do business in the USA.

Sure, but again, how's that any different from TikTok's situation?
The authors of the paper in question take issue with this article:

https://zwingliusredivivus.wordpress.com/2022/08/08/the-deci...
We can assume with some confidence that Carlsen is implying:

(1) Niemann should not have been allowed into the tournament

(2) Due to sufficient cheating evidence, and that he

(3) Does not wish to make a statement to avoid any legal jeopardy.

His approach so far can be seen as better than skipping tournaments or trying to force tournaments to not include Hans if they want Magnus to attend.

Analysis of their last game together: https://lichess.org/broadcast/sinquefield-cup--grand-chess-t...
Not if they're swapping with a machine that they refurbished. They can keep swapping them ad infinitum. That's what Asurion does with cell phone warranty claims. You pay a $150 deductible and you get a refurbished phone in exchange. They fix the part that was broken on your phone that you're returning to them and it gets refurbed to the next person.
Double speak in a nutshell.
Nice. Gonna bookmark this one.
OP claims responsibility for code when it is running in my execution thread. That seems to be the boundary. So no need to write their OS, though maybe their own interface for making syscallz.
Amounts matter, 82% of water use being for agriculture is unusual. Farms near me generally don’t have irrigation systems for crops because rainfall is enough.

US water rights sit outside the free market and result in exactly the inefficiency you might expect.
Is it possible he stole a lot of coin, put it in a place he controls, is worried they would find that, and just doesn't want to give it back?
What’s strange is that they used to have Soulver for iPhone/iPad/Mac and then discontinued this version.
Wow, what a well put together and informative video. Thanks for highlighting it
You don't really need their toolkit to make the repair - most of the repair shops has the necessary tools already available for other phones.

The basic process of opening/closing any moder phone is basically the same.
“If we did it right you’ll never even notice we did a thing” also happens to be an excellent way for any sleazy politician or “expert” to deflect any questioning.
It's called delusion. Your survival and quality of life depends on others liking you so we were selected to optimize for being liked by others.

Case in point the Queen Elizabeth died at 96 but given her quality of life in terms of novelty and free luxury stuff of the highest kind (and in all realms ranging from mansions to yachts to castles to planes to jewelery) she lived like 2000 years of a regular person life. All that because she was liked by millions of people (or the institution of monarchy is)

Being liked by others is the only thing that matters for quality of life purposes, if you aren't then feeling shitty is a safety mechanism which promopts you to action and to pursue likeability to get some quality of life and not waste the precious little time that you have been given.
Of course they do. Most phones, iPhones included, can withstand the occasional drop without any issue. That's clearly not what we're talking about here.
How about a 'turn-delay'... the broadcast field is always three turns delayed rather than a static time delay
"founders should never give up" :o

isn't that completely against the lean mindset?
> If anything, he's a little more acceptable to the mainstream now because hardcore pornography is more widespread and grudgingly accepted these days.

That seems like quite a stretch — and I would say built on a questionable premise.
I believe Samsungs have this feature.

I wish iPhones either supported it in landscape, or got a feature called ‘slide-over’ from iPadOS, where you can float another app on top of your current app, off-screen to the right. There’s a little edge you can then grab and pull over your current app to quickly peek or copy info back-and-forth. When you’re done you just slide back the ‘slide-over’ app.

It’s a really clever feature. And I know swiping on the gesture bar exist, but it doesn’t have nearly the same rapid fluidity of slide-over.
What's your opinion about Svelte? Has it made any big contributions to the ecosystem? Isn't the syntax and in general the way of creating components more intuitive with Svelte in comparison to for example React?
I love header comments, but many people fail to get their usefulness, and I get the "good code does not need comments" mantra recited to me pretty often.

Here is the thing: Header comments are not really about explaining their following code. They are about reducing the lines you need to read to navigate through the code by a factor of 5 to 10. Huge time-saver, and helps a ton newcomers to become productive quickly.
$1000 is the retail price. It costs less for Apple to give a replacement.
He is not "factually guilty". The cell tower ping evidence was basically all the "science" the state had against him, and it was the foundation for the constantly evolving and self-contradictory claims of the state's key witness, Jay Wilds.

I don't know what Jay's deal is (seems very implausible that he was the murderer), but with the cell tower pings being all but useless for tracking location, then Jay's stories are just circumstantial claims.

(again, it can't be emphasized enough how nonsensical and mutually contradictyory all of Jay's stories were over the years)
Someone has. It was posted here recently [0]. Different stakes to be sure, though.

[0] https://news.ycombinator.com/item?id=32729105
I believe so, but I know various SaaS’s cancellation UX’s have been litigated.
It’s hard to see how other players are negatively impacted. If anything the publicity is likely a net positive for them.
MSFT C++ Team Blog – Integrating C++ header units into Office using MSVC (1/n)
In your country is it normal to get help when you ask officials for help? For example: if you have a tax problem can you ask your tax department and get a valid response, or is it a glacial bureaucratic quagmire, with downside risks, backfiring where your questioning costs you?

Are school administrators overworked, nasty, or just don’t give relevant advice?

Are there hacks around the system that you can only find out through back-channels? Is it a cultural norm to seek workarounds or cheats?
Also this ongoing related thread:

Proxy Chrome extensions are not going to be usable in MV3 - https://news.ycombinator.com/item?id=32899846 - Sept 2022 (152 comments)
It's kind of amazing that 95% of gripes about open source projects and who is supposed to support them to what extent can be solved by open source authors being upfront about those expectations.

If you're releasing something and have no intention of supporting it, simply put "NOT INTENTED FOR USE IN PRODUCTION" at the very top of the readme file. It's that easy, imho.
Basically it was a hostile take over by an associate. That eventually resulted in ublock "origin" to differentiate it from the other ublock.

https://www.reddit.com/r/ublock/comments/32mos6/ublock_vs_ub...

This one is called lite because it is not as good as the old version, entirely thanks to Google removing support for manifest v2 extensions.

https://github.com/gorhill/uBlock/commit/a559f5f2715c58fea4d...
That's a very good point - I feel very uncomfortable on Twitter even today, but I can see how a "words first" education would make it easier to cope with.

It doesn't remove the issue though, since the space is so limited - IMHO Twitter is instead a much more fitting space for poets...
I generally advise my clients to mostly trust open source with lots of well known and documented professional eyes on it like reproducible builds of programming language compilers, standard libraries, and well maintained OS kernels.

Where I normally have them focus their resources is on the often thousands of dependencies that are, mostly, written has hobby projects by randos.
Really love the idea, and the passion behind it. Def could have legs.

Here’s the pitfalls I see you falling into:

(1) seriously, what data are you collecting? “Everything” isn’t a great answer (who’s supposed to use ‘everything’, anyway? “Anyone”?). “Apples-to-apples police misconduct statistics” is a good one.

(2) it’s important to clarify 1 because you need to know who you’re serving, and why. Different activists need different data. “Have all data” sounds good until you need to decide how to allocate your resources.

(3) more deeply, data is the land of edge cases. Even just with police misconduct, you need to get DEEP to rigorously compare seemingly-simple stats like “# of unjustified police killings”. If you don’t start narrow, you’ll never show value. If you don’t show value, nobody will ever care you exist.

When I look at the data you’ve collected, it ranges from annual reports, to municipal contact info, to crime stats. What’s important to collect at scale? To whom? What do they need it for?

Again - great, ambitious idea! But $250k goes fast. Show value before it runs out!
Now is probably a good time because it seems like there is less pressure for new features. Apple is so far ahead of the rest right now that they can afford to release almost exactly the same phone a second time and it wont hurt.
Which he’s done, if I'm remembering correctly.
This reads like a paraphrase of a press kit, and I have the sense that the writer hasn't actually encountered the technology in real life at all.
They privatized it by passing technical propaganda research to universities who modeled it into behavioral economics, marketing, advertising.

Social media is built with such research in mind.

Society will never stop trying to wrap a big fuzzy one size fits all blanket around everyone’s thoughts. We intentionally manipulate biology that religion stumbled upon.

A philosophy of “oh well there is this separation of powers written down on paper” does not stop graft, nepotism. Tribalism is innate to human biology; words on paper don’t just shut our bodies innate traits off. Thinking a law prevents intentional propagandizing is quaint and naive. They just call the same behavior and mechanics “behavioral economics” and viola; it may have all the mechanics of propaganda, but trust us, it’s not propaganda.
Sometimes creating value for the world is what most moves us.

Being open source or free feels like our work has a better chance of getting adopted, of having a community. It has a better chance of making a more signficant difference.
Apparently Xi says much the same that China would defend Texas when they declare independence from the United States.

See "Reciprocity".
Age is irrelevant.

If he is competing he needs to follow the rules.

The wonderful thing about chess is it's a great equalizer.

Young and old, rich and poor- anyone can learn and even possibly become great.

If you compete with adults you must be held to the same standards.

If you worry that under a certain age is too young to be held to such standards (which I totally understand!), they should have separate leagues.

He cheated multiple times- apparently more than he admitted to, and on the same platform.
Good to know. Have you built on these before? What was the rough timeline for you?
Well, I guess it's fortunate that OpenAI the company is owned by a nonprofit that's devoted to research. As long as they get funding they can keep doing research.
BTC miners make around 20mil / day and with a 400B market cap, that's around 1.78% / year so definitely higher. But I'd argue the United States Mint also relies at least partly on the US military.

The Protection Department would not last long against a nation-state attack. In contrast, BTC has no nation-state or military protection.
> I've always scratched my head at this, since to me it's no problem to admit ignorance, but I've come to learn this isn't the case for most people, especially in front of others (i.e. a meeting).

Leaving ego aside, there's plenty of societal conditioning that explains this too. The negative feelings you may feel by not knowing something (i.e. in a meeting, or in a class...) can certainly plausibly be connected to being reprimanded for not knowing something. It's definitely the bizarre case that not having an immediate answer for something can result in "losing" an argument. Obviously this isn't the way it should be, but it certainly is the way it is many time, whether that be in low stakes argument about a TV show in a bar or a high stakes discussion about what technology you should use. But it goes back even further than that I think. In many ways, our entire school structure is designed around the idea that your success is tied to your ability to answer questions on the spot. Political debates are the same way, right? The reality is that the answer to every question in a debate should be some version of "well, I'd go and ask my cabinet and consult experts in this area..." So I don't think it should be that surprising that it makes people uncomfortable to not know something.
Anyone in Italy, possibly Milan ಠ‿ಠ
For convenience, people use digital money --- credit and debit cards.

For privacy, they use cash.

A CBDC won't change any of this.
A ton of stuff is done on mobile terminals. Computer aided dispatch including status and location of a unit, report writing, identity checks, etc. Scanners were useful because a cop would ask the dispatcher for a license check on Joe Blow, age 34, of Smithville - or registration check on a certain license plate number. These days by the time an officer flips on his lights to pull someone over, they probably already know the registration/insurance status, license status of the registered owner, their photo, etc.

Then there's email and other messaging for lower priority things, and phone calls for stuff that is sensitive.
I have it on good authority that the US and Ukraine are women and that China and Russia are rapists who are blaming the victim by denying the US and Ukraine their agency and gaslighting them. That's why it's a genocide, I think.
Go look it up. It was all over reddit when it happened. The sub said don't do it and she did it anyway.
You are right. Forcing “non essential” small businesses to close, stopping all events, closing churches, parks, playgrounds, schools, making it illegal to walk on “the dry part of the sand”, disallowing dying people to have visitors, forcing hospitals to stop taking elective surgery, arresting people sitting on benches,etc… these all just ordinary things… right? Definitely not a “lockdown”, right?

What is a lockdown if that isn’t? And how come those “real lockdown” places still have Covid? Or did they not “lockdown” hard enough either? I’m very confused here.
False. The access requires entering a warrant. The authorities can't just access your data arbitrarily. Please cite sources or stop spreading FUD.
In the leaked video of the diner heist, the GUI that appears whenever an NPC changes state, like "HOSTAGE_COMPLY_FEMALE." People are comparing that to the "hacker view" you get in Watch Dogs where you can see info about any NPC you scan.
This is exactly how our post-mortem functions work -- we pre-generate a google doc with a template and we have the ability to copy (in rich text / markdown) the critical timeline.

On the action item section today actions are tied to Github issues and we are working to extend those - namely Jira/ServiceNow. We do already have a few that gives you a quick look at current status, how long the incident took, and open action items which you can filter by labels or severity (e.g. all severe production issues)

The postmortem doc, meeting link and slack channel are all automatically created for every incident
Yeah, I know. It was painfull process full of shattered glass.

Reasonably priced repair - unless they found some random part glued to the backside that they paired to the motherboard for "security reasons" :-D
Assuming the data is accurate it can be used to show disparities between groups for a variety of situations - traffic stops, arrests, jail vs. diversion programs, charge stacking, etc..