skysight-inc/HackerNews huggingface dataset:
...in a "canary" (basically a nightly build), for some users, for some specific cases (unsecure http, public wifi).
The Two Fiduciary Duties of Professors
I'm aware of that. I used to dedicate a Firefox container to these sites so they can track between themselves, but that's basically private browsing with extra steps. Private browsing, an ad blocker, and a cookie manager for when I want to scrub a site/container is the best compromise I can find right now.

I care for my privacy, but the pressure of spyware is everywhere, at multiple levels, and the effort required to counter it completely is excessively asymmetrical.
> The only thing that could have given them the advantage - not, not Kubernetes, although K was and is a great thing to fund - was a "cloud in a box" product, so companies could install a rack of GCP in their existing Data Centers, and use it.

That hit the Google “no accountability” tarpit: Anthos looked cool, nobody cared to show up to sell it. Amazon shows up.
Just a slow-to-die 90’s fad in the end.
That goes to cranium's point here:

https://news.ycombinator.com/item?id=33036297

> I like this rule of thumb to know if a behavior can be a psychiatric disorder: "when it interferes with normal functioning". It's purposely vague and subject to interpretation but it's a good first filter.

If these new "addictions" aren't interfering with "normal functioning", then they're not disorders. They're just normal parts of that person's life.
I want to write an open source FPGA synthesizer so badly.
Just a guess, but I think they don't want to serve as an oracle for the people whose malware they are trying to block.

Not saying that isn't shit or frustrating.
I'm really skeptical of comparing crime rates across borders. Slight variations in enforcement, reporting, different processes for conviction, etc can really mess up the data.

Even local crime statistics are a mess to interpret, extrapolating to the whole world feel suspect.
It depends. DSL and GPON are ITU-T standards. DOCSIS and Ethernet are not. 3GPP (mobile networks) does not seem to be ITU-T-dominated either, although they reuse some ITU processes. ASN.1 and X.509 are widely used in some Internet protocols and are ITU-T recommendations. I don't know what WAN looks like these days, but there seems to be some ITU standardization in the WDM area. So it's rather mixed.

I'm not sure to what degree ITU-T standardization of obnoxious features matters in practice. Not everything gets implemented. A lot of dual-use features are present on ISP networks in Western democracies because they are required by law. Institutional safeguards generally keep users from government harm in these countries, and not lack of standardization of the more invasive surveillance technologies.
Try thinking of it as work done to help other real people.

I found the "Emergency" door of a local hospital hard to find IRL, so I added a photo of it from the driveway POV. Another sort of real person you can help are the web-clueless owners of local small businesses.
People serve their own self interests in general.

You don’t need capitalism for that (as non-capitalist systems have clearly shown).
Hurricane Ian damages in Southeast estimated at $100B to $120B
People keep twisting themselves into knots trying to fit things into these labels, but the net effect is unrelated to the description.

Using a "declarative language":

my_bucket = aws_s3_bucket(aws_region, bucket_name)

Using an "imperative language":

if aws_s3_bucket.exists(aws_region, bucket_name):
my_bucket = aws_s3_bucket.update(aws_region, bucket_name)
else:
my_bucket = aws_s3_bucket.create(aws_region, bucket_name)

I prefer the latter. In every DSL I've ever used, people end up needing to handle weird edge cases, and it's extremely hard to do that with a "declarative-only" DSL, so they end up adding imperative-ness to the DSL. Give me a regular "imperative" programming language and lots of convenience functions that do black magic behind the scenes, and I'll do regular programming when the black magic falls short.

This is basically why AWS CDK / Terraform CDK / Pulumi exist.
You know you basically already admitting to acting in bad faith right? You said this: "And why should my question be in good faith?".

This is you basically admitting that it was all in bad faith in the first place, because, it is an attempt to justify it, by effectively questioning why your question should be asked in good faith in the first place.
The Catch-22 enabling "corporate responsibility shirking".
You mean typo in the title?
This is getting silly, I hope I don't make any mistaks in muy comentt.
VPNs don’t help privacy at all. They allow you to substitute trust in your ISP for trust in a different entity. For some, that may be good, but for most others it’s a wash.
You are actually being too kind IMHO.
This reminds me of how in the soviet union they would come up with a plan for what agriculture they wanted to grow. If they happened to be really good at growing, say, wheat, but really bad at, say, potatoes: they would deduce they needed to put more manpower into potatoes.

Rather than what they should have done which was lean into their ability to grow wheat better and just live with potato shortages.

(I'm no historian so I might be characterizing this badly, I admit)
For some - it was when their ISP started sending their customers scary sounding letters regarding certain downloaded movies and shows.

Some ISPs also needlessly block certain sites (ex. Verizon blocks nyaa.si)
If your deployment target is a VM/bare-metal rather than container, Vagrant makes a lot of sense for development.

E.G. my dev Vagrantfile fits in a small screen, and provisioning is handled by a single Ansible playbook that works for all environments (using conditionals). So there's no need to maintain a separate dev container, and a lot of subtle headaches are avoided in the deployment process

Setting up the dev environment consists of running `vagrant up` (assuming Vagrant/Ansible are installed). That's it.

You get all the benefits of IaC (fast ~reproducible dev) without shoehorning containers in.
should? probably. But I also get, from a capitalist perspective, why they don't: they probably get enough "we swear our website is actually fine" tickets each day that they would need a sizable dedicated team to offer that kind of assistance. I don't think any of the browser vendors, Google and Mozilla included, will go to any real effort to help the reporter. At least I haven't seen them do so. I think they take the view, and I don't totally blame them, that securing your website is your problem, and they aren't going to offer security consulting for free.
Yeah, I did briefly confuse UCS-2 (16-bit) and UCS-4 (32-bit) in my terminology, but the point still stands: lots of people expected the optimism in Unicode 1.0 that Unicode stopped at UCS-2 (16-bits) and never expected the "Astral Plane" to open up (and UCS-4 added). There was lots of software (including Windows) that had to do a lot of work to fix assumptions that UCS-2 was "the last word" on Unicode encoding and switch to UTF-16 or UTF-8.

That "except" there is still doing a lot of work pointing out that UTF-32 is not exactly UCS-4, so that point still stands. There's no surrogate code points allowed in UTF-32 today, but again if you want to assume "future compatibility" you shouldn't assume that UTF-32 is UCS-4 and will never have surrogate codepoints. As I said, we don't know if that next "plane" will ever open up into UCS-8 (64-bit) encodings, but if you are assuming it will never open up you are making the exact same sorts of assumptions that Unicode 1.0 users made with UCS-2 and had to consequently fix a decade later.

(And some of those same applications would have to fix again if 64-bit encodings opened up, because like I said UTF-16 has a math bug that its surrogates can't encode there, though UTF-8 is fine, and UTF-16 may be the worst of all Unicode encodings in the long run, but its legacy lives on so much because of all the early bets on UCS-2 being the last word and "easiest" Unicode that turned out to be bad assumptions when the "astral plane" opened up.)
I was thinking more along the line of the new rule giving another commercial advantage to SpaceX. Starlink will be effected, their satellites already deorbit faster than 5 years. But many other satellite operators will have to launch more frequently, and SpaceX is positioned to meet that growing demand.
Ask HN: Wiping a Mac – Best Practices?
I will be decomissioning some Macbooks for reuse or parts scavenging, and have read through Apple's official advice:

https://support.apple.com/en-us/HT201065

What other steps do you recommend?
As discussed here in the past, Wikipedia is notoriously left-leaning in content that has a political or social-cultural aspect. This is presumably (?) down to the type of people generally drawn to editing wiki pages, and the academic resources they also often draw on as "authoritative".

Fox news (and similar) as a source might be a problem, but it's not representative of the bias issues with Wikipedia.
> Either we manage to address the economic issues that make independent living unaffordable. Or we rediscover multigenerational households as a virtue.

I don't think you have one without the other, personally.
The statement is at least partly true. Nearly all big corporations and many smaller ones have people on the payroll contributing to OSM. And there are entire countries where paid / commercial editing makes up the majority of contributions to OSM. See this post from last year that breaks it down: https://www.openstreetmap.org/user/Jennings%20Anderson/diary....
Thanks for the clarification. I appreciate the info, and all-in-all I think MongoDB seems really good these days. Though I did have a lot of problems with earlier versions (which, I acknowledge have mostly been resolved in current versions) that have kinda soured me on the product and I hesitate to reach for it on new projects when Postgres has been rock-solid for me for over a decade. I wish you guys all the best in building Mongo.

Getting back to my main point though, less the bit of sarcasm, is more of a general rule of thumb that has served me well is that if you already have something like postgresql stood up, you can generally take it much further than you may initially think before having to complicate your infrastructure by setting up another database (not just mongodb, but pretty much anything else).
Edge is a reskinned Chromium browser with Microsoft tracking and telemetry baked in. Just because they have a VPN now, it doesn't make it any more private/secure. Why do people use Edge? If you're any way privacy conscious you wouldn't use Microsoft products.
Do you allow user generated content at all that is internet accessible? Have you looked up your domain and IPS in virustotal and other similar services? Can users host any type of file that can be accessed without authentication?

Yes/no/yes to the above questions means that is where you should look.
Audio drivers being the bane of Windows stability didn't truly stop until Microsoft took Creatives toys away by force with Vista's new audio stack. Instead the new GPU drivers indeed took over that role, but at least more temporarily.
Chinese heating appliances are keeping Europe warm this winter
Thank you so much. Lots of exceptionally interesting reading to dig into there.
While I would never use a VPN service fronted by a data thieving company, I really hope that VPN usage goes more mainstream so that companies can't have "no access from VPN" as a security strategy.

Ally bank recently did this and many others have intermittent issues due to flagging, etc.
In this case, that sure would be helpful. Now imagine that you're running a website that is intentionally trying to trick people into installing malware. You've successfully evaded tools like Smart Screen but now you've ended up on the list.

You're not sure which one of your virus payloads set off their screen so you open a ticket. And Microsoft is supposed to tell you exactly how to get off their list again?
True, if it is too general/flexible for future extension, devices might start only implementing part of it and we are getting limited by this blurry line of which device supports what
You might guess it if you had one of my others, but I find that avenue fairly unlikely, simply because this is the only address affected - that hasn't happened before. (Though I realise as guesses go, Amazon would be right up there.)

I've had other spam to aliases that aren't anything I use, and it didn't follow a format similar to that. (For some reason I get a lot to archos@ for example, even though I'm pretty sure through bug tracker, AUR, etc. I have public Arch-related addresses that I do actually use! I'm not sure why that came about.)
And I'd say healthcare is the biggest problem. The average price per square foot of housing hasn't gone up as much as people think. The problem is that people want to live in a big house in a specific place. Education is expensive but if you go to community college for two years then a decent state school you can come out without crushing debt, which you can pay off if you study something marketable.

Healthcare, on the other hand, is out of control. I'm nearing the end of my career and am well-off but have to assume that getting sick could wipe out our savings.
No. This is unavoidable. Mapping physical pages into a local page table is expensive no matter how you spin it. Depending on the data structures, this means doubling the time in some cases to allocate a physical page, which is typically 4KiB. Large allocations mean multiple page allocations. It adds up.
Just in case the downvotes didn't answer your question: no. Memory was already zeroed out before it crossed process boundaries. Apple's recent change is about zeroing it out even before it's reused within a process. (Freeing memory doesn't always give it back to the operating system; the userland allocator usually keeps a list of free blocks to be reused quickly.)

Therefore, the attack you are describing doesn't work.
Look at most of the replies here. "Nuh uh, it's you. You have failed to check the obvious..."

It inspires paranoia I tell you.
Why do you want to let driver memory bugs overwrite random kernel memory?
I mean this has been the core issue of journalists since FB started to render page previews for users.

The whole "FB Bad" news cycle, in my opinion, is primarily the result of traditional media feeling threatened by FB "freeloading" on their work.
Penguincrab: Rust Wrapper for Linux Kernel as a Library
Imagine that MS replies "we detected malware spreading from your site" without any other details. What is OP supposed to do then? Won't they be just as frustrated, if not more, than before?
Set your robots.txt appropriately if you don't want to show up in Google.

If I want my website to show preferentially in Google, I have to pay them. But oh no, we can't have the same rules for journalists as we do for us regular folk.

They want Google to pay them for sending traffic to their sites. This is not the way the world works.
Bastion Fort Key!

https://en.wikipedia.org/wiki/Bastion_fort
Penguincrab: Unsafe Wrapper for Linux Kernel Library in Rust
Thanks for the feedback! We're actually working on a new capability that will allow you to adjust the comparison period for each data source.

Also, you can set up weekly and monthly reports so you will get the comparison for the corresponding periods.
True there isn't at the moment but do you really want to be the first to find out because you left the back door open?
I'd say they're still a net win, generally. The ISP vs VPN service tracking who does cancel out (if you ignore privacy claims of VPN providers, vs ISPs generally not guaranteeing that at all), but for every other service I might consume, when I'm on VPN I'm no longer connecting from a unique IP that can have other identifying information tagged to it.
> That cannot be true.

> I know, it's Meta, but they can't be that blind.

You've not actually seen the kinds of decisions corporations execute on in the interests of shareholder value, have you?

Tech companies are better at using data to drive their decisions than non-tech companies; they are no better at using data -sensibly-.

If this actually happens (it's Blind), with the policy listed (it's Blind), the rationale is quite easy to explain - clearly, the one whose productivity didn't suffer -fired the right people-. The one whose productivity suffered -fired the wrong people-. The option you present, that some teams are actually sufficiently lean already, runs against the broad generality the CEO gave of "too many employees, but few work", ergo it can't be true.
The reason he plays RDR2 on Stadia is to play anywhere, so part of that is commute time, some work breaks, etc. In one of the replies, he shows his setup of a phone controller (Razer Kishi), scattered TVs at school, and his laptop. Also streams, so I'm guessing some of that time is that.

I agree it's a lot of hours but for a game you really like (with an online component no less), it's possible once you consider that it's probably instead of watching TV, reading, and other free time stuff. (I.e.: treat it as cumulative free time instead of "this one game is 6k hours")
Patterns (YC S21) is hiring devs to help us build the Figma for data
This happens to some of our customers (they have custom domains on our SAAS). It is beyond ridiculous.
In my case, it is the default browser at my current company. I don't know the reasoning behind it, but we are also forced into Teams. Corporate requirements is my reason.

FWIW, it is not bad performance-wise.
It has this to say about WikiLeaks:

"WikiLeaks is a repository of primary source documents leaked by anonymous sources. No consensus exists on its reliability. Some editors questioned the applicability of reliability ratings to Wikileaks. Some editors believe that documents from WikiLeaks fail the verifiability policy, because WikiLeaks does not adequately authenticate them, and there are concerns regarding whether the documents are genuine or tampered. It may be appropriate to cite a document from WikiLeaks as a primary source, but only if it is discussed by a reliable source. However, linking to material that violates copyright is prohibited by WP:COPYLINK."

Which seems reasonable to me.
Not ironically it does seem in the next 20 years that a merger of Google and Facebook could occur. Similarly Apple and Amazon joining in the somewhat distant future is possible from my crystal ball.
Plants don't absorb methane emissions.
President Zelensky NATO address, translated to English with OpenAi Whisper
"In addition, it opens the doors to promising applications in fields as diverse as nuclear waste management and space exploration."
That has never been different. Games push the envelope a lot. Especially if you don't have the best of everything.

Some awesome games were small. Other used a full 1.44" FDD. Some used 4 FDDs. Then the same happened with CDs. Finally only one CD needed. But there's space left over so later games made full use of it and soon there were games that needed 2 or more CDs. Lots of loading even going from one place to another. Decisions like "do I really want to go there now, I'll have to put in CD3 again". Or you bought the bigger HDD for much more $$$ and could install all 6 CDs onto that instead.

Can't run "Apache Longbow", need more RAM. But I can either buy the RAM or the game with the money I have. Damn!

What's been a blessing for me is not having the time to actually keep up with any of this time wise. Not enough time to really warrant spending money on new games and new hardware. Now I play games that are years and years old, I can get for cheap on GOG and that run fine on Intel Integrated graphics chips. Coincidentally those games usually load just fine in almost no time on modern SSDs as well and since I can't crank up the graphics full throttle, loading all that stuff into memory is relatively fast too etc.
Sure, but if you have someone that always claims there will be flooding, it doesn't have any bearing on whether it will flood next week just because the weather forecast says it will rain next week and floods usually happen after rain.

Maybe it will, maybe it won't, but the rain has a lot more to do with that than the "always claim a flood is coming" person.
People earning 400k tech salaries are probably fine though... ?
I have a number of Dell Wyse 3040 thin clients (5v version, there's also a 12v version) scattered around my property. I've converted two of them to PoE by the simple expedient of buying a USB PoE splitter, cutting off the USB connector, and soldering on the appropriate barrel connector (for future searchers: 4mm x 1.7mm, pin == positive). I also just purchased some pre-made USB-A to 4mm x 1.7mm cables to try out on the rest.
There was a period of time (00's) when it was hard to get out of an episode of medical treatment for any kind of injury or pain complaint without a script for Vicodin in your hand. You had to actively refuse them at every turn.

This was bad medicine, implemented by oblivious (or complicit) docs, pushed by bad practices by drug companies. Don't blame the patient.
You can use the Sun Type 7 USB keyboard which has a diamond symbol super key. Under Windows it functions as the Win key. Plus it has application keys on the left had side.
the fun part of that query is that it'll search across all regions that you have configured steampipe to use. If you did that in Python, you at the very least have to manually iterate over each region, handle pagination yourself and combine the results.

It gets much more convenient when you want to ask more complicated questions like "What is the most used instance type per region" or "How much EBS capacity do instances use across all regions, grouped by environment tag and disk type?"
How about using this to find bot accounts?
Anything that decides to wrap around your internet traffic without telling you should definitely raise your antennas.

Even if they had the best intentions, it's pretty easy to botch these things which erode your privacy even more.
I wanted to know if this affects "graveyard orbits". Seems like this applies only to satellites in LEO, while MEO/GEO are exempt.

> The Report and Order adopted today requires satellites ending their mission in or passing through the low-Earth orbit region (below 2,000 kilometers altitude) to deorbit as soon as practicable but no later than five years after mission completion.
They help in public WiFi.
Like entropy and the heat death of the universe, I find this subject always fascinating—yet somehow it always seems depressing.
Very true, we've lived in Oregon for 30 years but all my inlaws lived in the Bay Area the whole time. Now that they are ready to cash and move out their property values are a great asset but it's also very painful to pull up your roots at that age.
ISP injecting content into your connection is a known story (google "ISP injecting ads" for many results).

For better or worse Microsoft (or other corps) have not done that in recent memory afaik. They might do equally dodgy stuff in other aspects, but they don't tamper with the integrity of your connection (they might sniff it a bit).
That's already running on the Intel PCH.
ASAN can easily slow your program by 100x or worse. Your bias should always be that its impact would not be acceptable in production. If you were willing to accept the cost of ASAN you should have simply chose a slower, safer language in the first place.
Microsoft: Two New 0-Day Flaws in Exchange Server
Will this cancel out the other executive order, mandating that the government track my online purchases?
If this "VPN" is under the control of an entity collecting information about users wherever it can what's the sense of the service.
"VPN" (in fact the term should be "virtual internet access network") make sense only when it is independent of any entity controlling internet traffic...
Isn't that the default editor in the emacs system?
There are tools like xremap which intercept key combos and re-send different ones.