skysight-inc/HackerNews huggingface dataset:
The problem is that, not having a criminal record, and other easily "testable" things, is actually NOT a good proxy for having the emotional intelligence and responsibility and CONSISTENT RIGOR to never do something even a little dangerous with a gun.

In fact we see the same thing with regulation around cars. It turns out being able to parallel park is a bad proxy for someone not being stupid with a two ton machine, and plenty of licensed drivers still end up driving distracted, or using their phone, or drinking and driving AND DEFENDING IT.

Humans in general are very irresponsible creatures who like to blame others for poor choices they make. Why are we so confused when it comes to guns? So many firearm related incidents involve "responsible gun owners" until, oops, turns out they weren't responsible.

How do you LEGALLY VERIFY someone is permanently responsible?
Does the name Ockam have any relation to Occam's Razor?
Yes a malicious actor needs more than that because compromised domains are valuable and keeping them alive longer means more money...

A non-malicious actor who needs the URL isn't monitoring or responding to the incident properly. Threat actors do take advantage of this and simulate a fake cleanup. Actually they exclude certain ips and asns on phishing kits so that visiting the url gives you a 404 or a webhosts "cleanup" page.
I guess I just disagree with your characterization of pretty much everything you said.

The FBI - obviously not perfect, but the political shenanigans seem overblown to me. The mar-a-lago thing was 1. probably justified although I'll reserve judgment until the confiscated files are revealed, and 2. ordered by the attorney general, not the FBI. Based on the news I have read the FBI is far, far, far more accountable than my local police department which is utterly unaccountable because any politician who crosses their union is instantly replaced.

> the solution is very clearly to change the local government

Much easier said than done. Pretty much everyone in my city has nothing but negative experience with the police, but nothing can be done because every politician is scared shitless of them. We elect "police reformer" after "police reformer" and they quickly change their tune once they realize doing anything cops dislike effectively instantly means laws are no longer enforced. We're being held hostage, and there is no local solution.
The trend towards 0-configuration VPNs though make it totally compelling to just port your traffic home. I'm not trying to be a fan-boi, but I want ALL my traffic off the network of snoop. I'm just going to go out there and say Ubuiti and Teleport with WifiMan on phone/tablets/computers and 0 config bar codes, I mean its ALMOST frictionless for my family to do this setup once its going.

I least try to do this while we travel and are out of network range. How do people feel about this?
The ends do not justify the means, ever. Repeat this ad infinum.
You don't have uBlock Origin running?
Not to detract from your point about Meta, but isn't the online world in books like Snow Crash just as much of a corporate wet dream? I suppose it's more libertarian-corporate than what you might call the liberal-corporate of today, but it's still a brutal and gritty world.
I don't really find this convincing. Companies have been transitioning from paper for 20 years, and most have superseded it. WFH is hardly a step change.
Emerson's Manners is a great read on fashion in general:

https://archive.vcu.edu/english/engweb/transcendentalism/aut...
This is the "it's easy to steal so it's okay" argument, which I addressed up thread in a sibling comment about the dynamics of IP on the internet.

Yes, the conditions are as they are. Literature by dint of being pure text is probably in deep shit, but that's not what we're talking about—we're talking about whether the wide scale tragedy of the commons that is zero-friction IP theft is on balance, a bad thing.
Hm,

I think this is mainly an form of advertisement move to compel more users to use edge/not switch away from it. Reason: By now many non-technical people think a VPN is necessary (or at least recommendable) for "safety". Through how a VPN actually helps/works most non-technical people do not understand at all. For Microsoft providing a VPN which by default is only enabled on public WiFi and similar isn't too expensive.

They also need to compete with Apples Privacy Relay feature.

So putting bias aside it seems a good thing.

But there are some gotchas:

1. a VPN is not per-se privacy protecting, it is only that if the VPN provider legally binding agrees to not sell out the users data.

2. a major browser which tries to force itself on all windows users providing a VPN for free hurt the VPN market due to the unfair competitive advantage this VPN has.

3. It could normalize for many people that VPNs do not necessary have a feature to avoid geo-blocking => make it easier for legislation targeting such features to pass

4. also more centralization for cloudflair

Through if you ignore all this from a pure "common peoples security" perspective (i.e. not state actor attacks) this is an neat improvement. There are still to many things which allow attacks due to not using HTTPS and for non state-level attackers the best attack vector are public hotspots and similar where this VPN automatically is enabled. E.g. common security problem is HTTP(not s) redirect links in e.g. mails, which an attacker could trivially rewrite to point you to their site which automatically proxies the site you originally wanted to go to. Worst offender I saw was a FIN-tec site using emailing http(not s) redirect links containing the auth token for the initial account setup...
I think he's talking about administration type jobs, or something.
They're very tricky about wording it, they'll say things (like the car companies do) such as "not being connected to the monitoring service MAY void your warranty" (if a fault happens and you don't detect or correct it - just like changing your own oil and replacing it with baby oil will void your warranty).

And you can be hella sure they'll default to any excuse not to honor their warranty, because they know that you'll probably not bother fighting them in small claims court.
I'm going off of memory mostly. I'm pretty sure all three asked me for a phone number to play ranked, but apparently it's optional at least for CS:GO. The impression I was given though was "give your phone number or you'll only ever play with hackers and smurfs" such that it was basically required.
_I_ can't grok why _I_ haven't switched. :-)

So this weekend I'll make an effort to switch from Chrome.
I tried many times to learn programming in the internet (Coursera, Udemy, YouTube, CodeAcademy, etc) and I was never successful. I always managed to get a few lessons and things strat getting complicated and I drop.

Two year ago, a family member, who have a very small charity institution, and all the income/outcome was written up in a notebook, ask me if I can digitalize the accounting. The simple solution was a Excel sheet and done, but this person is very bad with technology, so I was afraid that he would move something in the excel and everything would be messed up.
So I build with Google sheets, google sites and Google forms a very simple web application to record incomes and outcomes.
Once I did that I start working with Google App Script in order to automatically send emails with invoices and reminders.

At the beginning I didn't had a clue of what I was doing, just copy and paste code from the internet into Google App Script, and following YouTube videos step by step.
(Google app Script is a cloud environment where you can run JavaScript code and connect to Google products via API)
With a few experiments I start understanding what's going on.

I was very satisfied with the result and start looking for other things to do and automate.

With the time I start involving html and JavaScript client side code.

I became pretty good in those things, and all my learning was basically looking in W3 school and stack overflow every time that I needed to do something new.

I did a few web applications like this.

When one of my friends ask me if I can help him with some automation and was willing to pay 500usd for something that took me an hour, that rang my bells and I realized that I have something with great potential in hands.

To make long story short, eventually I quit my job and start making custom software for small companies.

Today I have about 10 softwares that my customers use an daily basis and overall they are pretty happy with my work.

The big lesson that I learned: it's very hard to learn something new if you don't have a clear purpose for it's application, and for that reason it was always very difficult for me to learn how to code, until I needed to solve specific problems.
(Or the other way to learn is to be in the right environment (collage) where the specific goal is to not leg behind)
This has pretty much been the exact opposite of my experience in fintech. But it's a startup so maybe that's the difference
You might look into what Amish life is actually like outside of movies. Most depictions in the media tend to at best be caricatures of our most conservative sects like Schwartzentruber Amish. Beachy Amish, Schwarzenau, even Mennonites have some conveniences; a computer is just a tool of my trade. Each community inside each sect will have its own Ordnung, which is just a mutual agreement on values and conduct when it comes to community. I like to joke with my English friends that we're the original neckbeards :)

Here's a good depiction of midwest Amish and the diversity in their communities. https://www.youtube.com/playlist?list=PLEyPgwIPkHo7lOk-72-tX...
I'm not sure this is quite that, if you will.

I'm also not sure someone couldn't cleverly figure out a way to use stable diffusion to write code based on a text prompt.
You move it to xyz.com/anotherbadpage and tell MS it has been cleaned up. They do this all the time. Speaking from first hand experience. This is a very simple topic, why are there so many people not understanding this?!
> just let me know when I can easily find good devs

As a good dev looking for a job, I can tell you with 95% certainty that the good devs are not applying to your job because your company is a boring knockoff doing boring things and your job sounds like a boring dead-end where developers will be cordoned off into a little box with nary enough room to turn around while they implement mandates handed down from above by a product owner who never uses the actual product with no opportunity for actually discussing whether this new silly feature will make the product worse or not (it will) while technical debt and cruft accumulates and any attempt to invest in the long-term health of your product will result in a reprimand.

After months of looking at job postings, hiring managers complaining about not finding good devs just sounds like incels complaining about not being able to date hot women. Look inward. Lots of good devs are out there looking. They're just not looking at you.
It is no doubt caused by the "app" model infecting everything, and justified as "security" to silo all data only within the app that created it.

"Task oriented" is an excuse for making closed proprietary solutions that don't interoperate.
I guess it would make sense for them to keep it until you have the actual legal age.

It wouldn’t make sense to refuse to sell you liquor when you’re in your 80s though.
Can I get flux installed after rooting my TV?
Personally speaking being from a state that they recently tried to attack using migrants as human pawns, I don’t see a reason to have sympathy for the state.

Individuals who didn’t support those attacks and want to work together, sure. The state as an aggregate entity? Absolutely not.
but... you also committed fraud, you just got away with it...
Notably, the army is smart enough to use blanks for ceremonial purposes, which it doesn't seem like these people know how to do.
To add on. Even outside the scope of funding. There is an interesting trend in local politicians elected to city council, mayor, etc and having backing of the police union. Any serious action that would cause a culture change that is unwanted by the police could result in loosing the backing of the police union, hence, a good chance of loosing an election. So change on the local level is unlikely to happen.
> De-orbiting faster means reserving more propellant for the final de-orbit burn.

One new technology is releasing a sail to increase drag.

Example: http://www.parabolicarc.com/2021/08/23/millennium-space-syst...
Decision trees – A friendly introduction [video]
If I had my billion dollars I would fund a modern intentionally crippled hypertext browser with hard limits on programmability and style complexity.
There's ScyllaDB as a replacement for Cassandra. https://www.scylladb.com/
I’m surprised Stadia was good enough to play live on stream!
Wonderful improvements.
No, you're not the only one.

It's ironic to see on this same HN front page a story about police & face recognition. We should oppose all forms of social credit / new world order / cashless / corporate fascism.

It shouldn't just be "the police are bad, so let's deny them this tool," it's "the police will just enlist private companies to do their dirty work for them, so let's deny everyone this tool."
License plates are publicly available IDs that are annoymous to most of the public usage.
Must every neovim release thread be brigaded by naysayers asking the same question for the 1000000th time? If you don't like its value proposition, don't use it. Simple. Keep using your IDE or whatever solution you prefer. This is almost exclusively happens in (neo)vim threads, and its so utterly distracting. That there is an entire community camped around neovim should answer your question about why anyone choses it over {insert non-vim solution}
I bought a house with solar panels 6 years ago.

There was an ethernet cable plugged into the inverter panel, which ran to a Comcast box.

We switched to FIOS after a couple of months, and never switched the connectivity of the solar panels. Everything worked fine, but ...

A few months later, I received a strongly worded email from an organization I had never heard of, saying that I needed to get the solar panels back online, because it was a requirement of the contract the previous owner had entered into to sell the SRECs generated by the panels. Failing to connect the panels to the Internet could lead them to pursue action related to a lien they had on our property.

Wait, what contract? And what lien? This was the first I'd heard of either, and the lien hadn't come up during the title-insurance process.

It turns out the previous owner of the house had entered into a contract with an organization in our state that pays you a lump sum, if you sign away the rights to the SRECs your system generates. The owner had used that lump sum to help pay for the panels.

But then he sold the house to my wife and me, without ever disclosing the existence of the contract. So basically he sold the SRECs to both of us. He sold them to the organization by virtue of their contract, and he sold them to us, by virtue of the ownership of the panels transferring to us when we bought the house.

And the lien never came up because it was not against the real estate itself; rather, it was against the SRECs -- the Solar Renewable Energy Credits that are generated by the panels. They're not physical assets, but they do have substantial value.

It took the retention of a lawyer and a whole bunch of back-and-forth between us, the seller, our buyer and seller's agents, the lawyer who handled our settlement, and the SREC-buying organization to get the whole mess sorted out.

In the end, we got the lien and contract dissolved ... and then we hooked the panels up to FIOS, and I get handy little charts of all the SRECs we're generating :)
Companies cannot legally provide a lot of services to minors.

For other services there is enough bureaucracy that it's easier to avoid by not providing the service to minors.

It's also easier to ban accounts for life when they lie about who they are. You don't run the risk of aiding fraud and being fined if you make a mistake, because you banned them.

There was nothing preventing the kid from creatibg content. It was in using Ad Sense to make money off it.
This is what needs to stop.
If government provides cheap insurance. The building on coast is a great idea.

Geraldo Rivera did a special on it many years ago.
He lost his house. Didn’t cost him a dime. Was planning on rebuilding due to cheap insurance. Which he seemed to find ridiculous.
Biden's decision tree if Putin goes nuclear
> but do you have anything that isn’t the same third party anecdotes that get repeated as nauseam?

First, can you give a "concrete example" on what you consider as a "concrete example"?

Because so far, I've only seen name calling and flippant remarks from you. I'm honestly trying to understand where you're coming from.

That way, we can start from a place of understanding. Instead of going in circles and you moving the goal post.
> So, no, the stars don't have to align at all. The attack is straightforward, the POCs show that.

Please spell it out for me. Suppose I'm a typical desktop user, how is important information going to be stolen if I have mitigations turned off and JavaScript enabled? What state does my browser have to be in, and what actions do I have to take (or not take) for the attack to succeed? What likelihood is it that someone has deployed an attack that meets those requirements?

> Further, attackers don't need to really go for these sorts of attacks, there are more reliable, well-worn methods for attacking browsers.

So we agree it's OK to leave mitigations off and browse the web?
The scientific studies are the ones based on survey methods, which were published in peer-reviewed scientific journals.

The Iraqiyun estimate was not published and didn't explain its methodology. The Iraq Body Count isn't a scientific survey - it keeps track of deaths that are reported in the media. It's highly unlikely that every (or even most) deaths that occur in a war in a country like Iraq (recall how dangerous Iraq was at the height of the war) will be recorded in the media.

That leaves the ILCS, the two Lancet studies, the PLOS study, and the Iraqi Health Ministry's estimate.

The ILCS was carried out only a year into the war, before the height of the violence (which was 2006). It was not focused on determining deaths - the question about deaths was only one of many questions asked. Nevertheless, this study found a far higher death toll than IBC.

The Iraqi Health Ministry was run by one of the parties to the civil war, so it's questionable whether people would have felt are liberty to speak freely to the Ministry's workers, especially about something as sensitive (and potentially incriminating) as deaths in the family.

The first Lancet study was also carried out relatively early in the war, but found a much higher death toll than IBC. The 2nd Lancet study was carried out in 2006, after violence had exploded, and found a number of several hundred thousand, but with large error bars. The later PLOS study was much larger and had smaller error bars, and found a number around half a million.

> the most covered war by journalists in history. The surreal feeling at the time was that it was all televised. It seems unlikely most if any were infiltrated by US covert intelligence white washers, but I can't fathom any overarching reason for such wide variance.

I don't know how Iraq compares to other wars in terms of coverage, but most of the country was not well covered. Western journalists were heavily concentrated in the fortified Green Zone in Baghdad, or embedded in US military units. During the height of the violence, it was extremely dangerous to wander around Iraq as a foreigner. Every study (even the one by the Iraqi Health Ministry) found death tolls far in excess of what IBC documented from media reports.
Security teams don't block certain VPN traffic for fun.When a certain IP block has been running credential stuffing attacks all month long, It's very reasonable to see any request from said block with a lot of suspicion. In many cases, 99.9% of login attempts from certain IP blocks are just fraudulent, and there might be more requests from one of said blocks than legitimate requests from the rest of the world combined.

Completely blocking a VPN is often too blunt an instrument, but even the best alternatives are unfriendly to legitimate traffic. The most user-friendly thing you can do is to rely on bonus security controls, like asking for two factor authentication for everything. No, you will not be able to log into anything from a new device, even, without the two factor. A very understandable tradeoff for a bank, but we'll end up seeing that for any account protecting anything of relatively low value.

If your second factor is tied to, say, a phone, it's not going to be fun to wait to replace it if it's lost. But in a world where most traffic is coming from a VPN, there aren't many good alternatives.
Steam Deck OS can now be installed on any machine – ITIGIC
Oh, yes sorry I didn't realize I could actually link:
https://www.musi-co.com/listen/track/test_energylevel
Biden administration changes student loan guidance, as Republican states lawsuit
I never did.
FEMA spent about two billion on New York from Sandy.
The punch line: npm -> pnpm
(Co-founder of Felt here) Thanks for the kind words! We are lucky to have Erica on our team. If you ever want to talk maps, my email is can@felt dot com!
> What he leaked was that our government let the NSA spy on our citizens illegally, so it's not like all our privacy laws actually protect us if our own governments let the Americans have free access to our data any way.

Yeah :/ Unless I hear otherwise, I'm assuming this order has little to offer individuals and is instead a big business & government treaty. Governments (including our European ones) keeps their mass surveillance and American mega-corporations get the business contracts, all covered in PR of increased individual privacy.

Since it's an executive order, it also wouldn't surprise me if there's a hidden payload relating to increased US surveillance due to the war. I may sound cynical but every leak about the intelligence apparatus has proven even me naive.
Wild fire destroyed my home I California. FEMA gave me a check for 25 grand.
It's also roughly the same size as a high school soccer field so in my town that didn't have football but did have track and soccer, it's still a relatable measurement.
Everybody is suspicious of Microsoft's motives but I think in this, you gotta consider how many windows systems are out there used by security novices.

Lots of people are computer savvy but want to use a computer to do something else not under the umbrella of hobbyist sysadmin work.

I don't see the downside here, again, considering the multi-millions average users Windows/Edge has. If you are savvy enough to roll your own VPN using algo from Trail of Bits, then do that. If you are able to weigh the pros and cons of VPNs from having one or not, or which one to use, you are ahead of 99.99% of the people this will help.
VS Code is not slow, it launches in second or two, you probably installed bunch of shitty extensions that slowed Code to crawl.
Maybe we should start referring to WFH jobs as virtual collar jobs or something.
Then change the law, you can't have it both ways.
Also - if they weren't here legally before the stunt then the governor of Florida literally smuggled people into the country, which he cannot do as immigration is the federal government's purview.
The thing is, there is a decent point that border states bare the brunt of illegal immigration issues but to draw attention to it at the expense of poor humans is just despicable.