skysight-inc/HackerNews huggingface dataset:
TL;DR of Ars: Connectionless LDAP

Actual article that Ars writes about: https://blog.lumen.com/cldap-reflectors-on-the-rise-despite-...

Actual news (less vague title than Ars'): the number of vulnerable systems has increased ("from the 7K range to over 12K" "over the last 12 months"). Only 15% stays online longer than a year, though, so it seems that most admins catch on after a while. "[T]he Connectionless Lightweight Directory Access Protocol (CLDAP) [has a] Bandwidth Amplification Factor (BAF) of 56 to 70x".

Actionable advice for Windows Server owners is provided at the bottom of both articles.

---

> [heading] A never-ending arms race

Are there still protocols newly put into production that do not take reflection attacks into account? In my experience, it's all legacy. And don't more and more ISPs enforce BCP38 (http://bcp38.info)?

Not sure this headline of Ars' is true.
> Prize: A trophy with the winning university’s name, participating students’ names, and date of award will be displayed at an FAA facility, and a display copy of the trophy will be sent to the lead academic institution. The lead university will be presented with an award of $25,000 and finalist student will each receive a copy of the winning certificate.

...and quoting from FAA's FY 2023 budget submission[1]:

> For FY 2023, the FAA’s budget request of $18.6 billion represents an increase of 3.3 percent from the FY 2022 Continuing Resolution (CR) level. When combined with the $5 billion in advanced annual appropriations under the Bipartisan Infrastructure Law, the total FY 2023 funding for FAA is $23.6 billion. This funding level allows the FAA to make continued investments to safeguard the most complex airspace in the world while transforming our aviation infrastructure.

What a joke.

[1] https://www.transportation.gov/sites/dot.gov/files/2022-04/F...
You don't understand the term entropy.
Counting photons won't keep a camera from being "jammed." Unless you are using a physically perfect polarizing filter, such that each pixel on the sensor only receives photons from the exact angular window, traced back through the lenses, you have a camera that can ultimately be "jammed."

The human eye isn't so great on those terms. But humans can raise their hand to block the sun if it's straight at our eyes.
Somebody may already have the same name as a celebrity, or think it's worth changing their legal name. It seems to be already possible to have multiple verified accounts with the same name, e.g., https://twitter.com/thejohnsmith and https://twitter.com/Harryslaststand are both verified as "John Smith".
In iOS, sure, but macOS? Most people I know install stuff outside the app store, it's still the case that many apps come as a dmg that you open and drag the app into the Applications folder.
Even if all that is true (I have my doubts) that wouldn't make Lula a fascist.
This could be used on any any commenting system or even Reddit to check if the user has read the article and or have knowledge of something before commenting. Sort of a captcha.
The verification process doesn't change, you just need to pay for it.
Its interesting, that kind of object level fusion is a fairly different problem to training visual perception, following some of the less in fashion robotics techniques. I wonder if its a case of the Tesla engineers focusing on the fad technologies (or just their strengths) more than its a hardware cost thing.
Many services do some sort of “liveness check” to verify there’s a live human interacting with the webcam for the selfie.
Flutter works well for cross platform.
A couple of historical points I seem to remember. There were X10 versions running on SunOS (3.5?), Though I don't know if it was officially supported. X11 early releases were significantly slower than X10 on Sun hardware.

SunView was originally Suntools. The change to SunView brought some improvements in the UI, but mostly in the API.

I can still remember the days of the Sun 1 with the VT100-like keyboard. To a freshman at MIT who had only seen a Radio Shack TRS-80 Color Computer and an Apple II, it was almost undescribable. It was the days of 1MB of RAM on a "personal" machine and a lab-wide pair of 500MB Seagate Eagle hard drives being all you could possibly need.
Our PR dept wanted a more chill out version. Shaving a byte to the sound of ukuleles:

db '4LOHA- W0rld' 0d 0a '$'
xchg ax, bp
xchg cx, dx
int 21
ret
This is spoken by someone that's never had to work in a global environment.

Like payment stuff and subscriptions is a nightmare when you have to deal with legal issues across the world. This is without going into needing to actually scope out the work, figure out how to integrate the changes safely, test them, roll them out and more. Plus it's disruptive to whatever work engineers were already doing to suddenly tell them 'do this thing NOW or you're fired'.

I really start to wonder how many people have actually worked as professional engineers.
> since in most cases you can just look up the person's social account and download their selfie

Are these reviewed by a human? If so, why not 'just?' require the selfie to contain the document, some written nonce, and/or a weird body position, like a flag semaphore position?
The other benefit of codegen in situations like this (a company wide schema) is the potential for multi language bindings. Entgo demonstrates this by bridging a Go ORM, SQL migrations and a GraphQl schema.

Interesting reading along the same lines is Language Oriented Programming (1994) http://www.gkc.org.uk/martin/papers/middle-out-t.pdf
> deterrence is about preventing others from breaking the law

Deterrence is about preventing the offender (specific deterrence) or other people (general deterrence) from breaking the law through intimidation by making manifest the adverse consequences thereof.

Rehabilitation is about preventing the offender from committing crimes by removing/reducing/counteractinf the inclination to do so (other than by intimidation.)

Incapacitation is about preventing the offender from committing crimes by denying them capacity, to some degree or for some period.

(Restitution and retribution are not aboit preventing crime.)

In practice, the US tends to ignore the science and deterrence ans rehabilitation and not optimize for it, and marginalizes restitution in the criminal justice system, so thr criminal justice system is mostly about retribution and incapacitation.
This is pure politics. The AOM want proof of loyalty and shipping a competing image format threatens that loyalty pact.

It’s also incrementalism at its finest. “We already shipped av1, adding a single frame decode is minor overhead” is the likely rationale. But it misses the point that images are gazed at while video is moving and can get away with a lot of quality sins that you can’t with images. But worse is that av1 is full of optional features. Sure the client could implement it, but how can you know? Even the lauded animated avif is horribly broken across the ecosystem because of this optionality — and there isn’t any way to tell a priori if the browser can support animated avif. Or 444 avif. Or ycocg avif. It’s just down right broken as an image format falling to the lowest common denominator.
So does work like this essentially mean there will always be strange edge cases in AI algorithms so that they will never be 100% accurate? Which means the AI driven cars and robots will also never be perfect at navigating the world? What degree of accuracy would we ever be comfortable with? The current metrics for AI seem too simplistic, there needs to be several new and better ways to understand how functional an AI is. 99% accuracy in classification sounds great until you realize that means your car will hit something one out of a hundred times. How can you objectively say an AI is a better driver than most humans? Is the self-driving vehicle industry developing standards or is it all just trial-and-error based on human observers?
I was not precise enough in the wording. Leading cause of accidental death. Obviously it is not beating out old age or heart disease. Doesn't change the fact that a self driving system with the record of a typical human would be considered unacceptable.
My 40 year old company with about 12k users switched from self-hosted Exchange to Azure-hosted Office 365. I'm assuming part of the reason for this is to ease complexity, and it's working quite well for us.
Not in practice. Maybe at university. Software architecture I would agree, software engineers are just developers with formal training. I have not seen any difference in the actual work either does. But even self-taught developers can end uo doing architecture.
We need a replacement for TCP in the datacenter [pdf]
That sounds more difficult to me. You need to create a pipeline to migrate all existing users to your new pricing model, and you need to create all the messaging around that in all different languages. Seems it would be easier if it was just a new feature with a clean slate.
Peering outside of Romania might be questionable. I visited a few months ago and got 500Mbps within the country and just 50Mbps to my server in The Netherlands.
Some aspects of HTML are slower than Tk (which is not all that language-agnostic — you can't write Tk apps in bash or Gambas or Prolog, which are totally capable of outputting HTML), but some aspects of Tk are slower than HTML. I feel like HTML with JS is generally a smoother and more agile development experience than Tk.
TL;DR: Jack Dorsey and Elon Musk are secretly planning to destroy democracy and make Putin the supreme world leader.

Is this parody? I hope it's parody, I would hate it if the author was actually this crazy. Hilarious either way
So they saw ActivityPub and invented their protocol that achieves the same thing but does it in a much more convoluted way.
A minimal RocksDB example with Zig
I’m guessing neighbor in an apartment / multi-unit?
> It's federated. Much like email.

How feasible is it to have a username at a custom domain? In case the server you sign up on goes out of service. Do you have to set up your own instance in order to do that? Is there a barrier from setting up a new instance and then participating immediately in the wider federated network?
A blue check has never had anything to do with how many times you login to the site.
I wonder, how has the calculation changed based on current knowledge?
We already measure income for Pell grants, etc.

Race is massively harder and more biased. You’re black = assumed excess difficulty in life? What about white but just came from a refugee camp? What if your family has been poor for many generations?

There were reasons to say a black person’s life at $50k/y income is harder than a white person’s, and the same with boys vs girls, but things have changed quite a bit. Specifically society has mixed a lot more, immigration and interracial children have significantly changed the landscape, to say nothing of the fact that girls outnumber boys in college!
Excellent points, I didn't think about the fact that even evolution couldn't come up with a vision system that works as well in the dark as it works in the daytime.
This is a piece that mentions briefly that regulations promoting federation have been proposed. Otherwise, I don’t see much of an “argument” one way or another.
> engineer-weeks

The executive sponsor and their focus groups, product managers and their review committees, finance and their budgetary approvals, HR and their headcount approvals, the project managers and their technical working groups and sizing estimates, dev, UX, legal, test, deployment, DEI, customer advocacy, competitive analysis, etc all have to have representatives to develop a plan and sign off on it, meetings have to be scheduled, documents have to be created, approvals have to be stamped.

If you've ever worked in a true bureaucratic hellhole, you can understand how a few engineer-weeks turns into a 3 year 20 million dollar that can't be killed because too many "important" people would get egg on their face so it eventually gets rolled out, promotions and handshakes all around, and then it gets scrapped 2 weeks later because it is so terrible and nobody speaks of it again.
I can understand (if disagree with) your view of Lula as a populist.

Why do you call him a fascist though?

> His campaign ran on a platform of “regulating the media”

It didn't, but in any case the media is regulated. Everything that's being argued in this regard is about breaking trusts and monopolies in the media.

Trusts and monopolies are widely regarded as counter to working democracies, and free markets. Seeing liberal right-wingers fight against it is at least somewhat ironic.

> succeeded in censoring a major news channel and the release of a documentary film about the attempt to murder the president in the previous election.

Could you please post references to this?
So for approximately the price of just two Something Awful dot com forums accounts per month, you too can opt into being a public figure? There's something to be said for being a private citizen, a consumer, in this wintry economic climate.

I still remember a Google interviewer where the guy jumped from being almost BDSMlike in the attention to detail he paid to my CV after I explained the CIA triad, then jumped to getting ornery when I pointed out my mind is weirdly visual, and I can remember the textbook - the very next page had a paragraph on nonrepudiation.

(That means we're getting out of this cycle of treating ambiguities during my resumé gap as chances for fishing expeditions -- I'm spending Halloween wandering around Appalachia in a Bernie shirt thanking people for putting their dogshit into a little bag.)

Rather than be at all deferential I should have said something to the effect of "You control the email service I registered as a child, it begins to make you people look like full on pedophiles if you keep someone this smart economically precarious long enough, stop being cute in these if you don't want civil unrest."

(I got kicked off Twitter for being too... partisan. I thought I made it clear -- call whoever you want? Just don't get mad if folks tell you "Oh, we knew about that. They sell mace at the sporting goods store. You were warned your ideas suck LOLbertarian."
The placement of turtles is a bit unorthodox, isn't it?
How are permissions managed so that you can change your followers configuration to point at your new account if you move, but otherwise not allow anybody else to pull that same stunt against your wishes?
Oooh I hadn’t seen the Viltrox! Good shout, I might get one.
“Stanford’s War on Fun”
IMO the bigger issue isn't getting banned, it seems the more likely scenario is having the operator of the server decide for whatever reason to shut it down. This isn't likely to happen with Twitter.
Naturally in Colour, a Look Inside a Colour Picture Tube Factory [video]
We had a sushi restaurant (in Canada) that belonged to Chinese expat that worked with the whole QR code + order + pay on your phone and I did find it pleasant. I would go as far as saying that I prefer it.

It might be cultural, but I can count on a single hand the number of times I went to a restaurant and the interaction with the waiter/waitress improved the overall experience.
> you think that people being banned on social media is a greater threat to a fall to authoritarianism.

That's a strange reading that seems to assume that free speech goes hand in hand with authoritarianism, a laughable notion. Free speech is the antithesis of authoritarianism. No authoritarian has ever allowed anything approaching freedom of speech within their jurisdiction and sometimes even enforce it far beyond. As such, what you think is wrong.

> > To label ideological opponents with the label of a mental illness simply for disagreement is a poor show.

> I did not do this.

A phobia is a mental illness, you call your ideological opponents transphobes, so you did do this. It's pathetic name calling.

> I hope that you also donate your time and money to those who suffer at the hands of people spreading hate.

I'm here right now spending my time doing just that because you quite clearly do hate your opponents.

> Nazis are shit. You are treating me like a child.

No one here has claimed that Nazis aren't shit but you're acting like a teenager high on self righteousness that thinks proclaiming that is some kind of insight for the rest of us. It is childish.

As I wrote, HN isn't the place, and one reason I bring it up far too often is because far too often of late I see people, like yourself, treating it as such. I make no apologies for wanting the standards to remain high.
You are making a lot of potentially faulty assumptions. 1) The "delta" was wide enough to save/harm people, you have no idea. 2) The extra information provided would always be valuable and/or not be overcome with better AI models using the visual sensors in the future. 3) The amount of technical overhead generated by the extra sensors were not prohibitive long term. When working with AI there are often times where it would seem logical that extra relevant data will always improve a model, but that turns out not to always be the case, or provide so little value that managing another dataset is just not worth it.
There were reports that he had deleted Signal messages, which could have led to significant sanctions if the deletions were made after discovery requests had been made.

https://www.theverge.com/2022/10/5/23389568/musk-twitter-sig...
To extend: are there even strong resources for systematic organization and resistance?
Love the work with httplistener here:

https://github.com/ShaunLawrie/PwshPaint/blob/main/PwshPaint...

I've done considerable work with it and niche cases like this the at a teensy bit of web to PowerShell is a perfect usecase
>The cost of living in a low-trust environment is orders of magnitude greater than the value of the items stolen.

Absolutely!
This is a function of compilation, not typing.
Is there a version for Sublime Text?
How do you judge if a friend is incompetent? System design & LC hard before you hang out?
Who would have thought that a unique ID required to connect to the cell network would be used to track everyone....
end up doing, sure, but I'd argue architectural work is not "mere coding".
Lost had a plan. Then management wanted to drag out the phenomenon. So the story had to expand, it's how all those arcs that never resolved started. Then suddenly, the fad was over and it needed a quick close.

Kinda like how GoT fell off in the last season.
I keep thinking the same. It's the best option short of just targeting it against themselves and causing just enough nuisance that they either firewall, upgrade, or correctly configure these ancient protocols. For example for the protocol that this article is about: "Windows 2000 Server requires UDP" https://wiki.wireshark.org/MS-CLDAP. Anything newer than Win2k means you can already turn it off.
Would there be any merit in rebuilding the internet inside the exising one, using it only as transport ? Rebuilding all of it, including DNS ?
Don't buy a car, buy real estate somewhere you don't need one is properly good advice!
The majority of comments surrounding stereo-camera/lidar questions have a ridiculously simplified idea of the problem. It's obviously the case that 'more sensor good, less sensor bad'. This is frankenstein's monster level technical analysis. Why don't the majority of large-brained animals have many eyes, and many different antannea appendages processing an array of diverse sensory input? You don't just automatically gain by adding lots of sensors. The signals have to be fused together and reliably cooperate and come to agreement in real time for any decision. Any sensor is only providing raw crude data. The majority of the work involved is done by processing this crude data and inferring a much more sophisticated approximation of the real environment from prior knowledge, hence using neural nets with pre-trained data. It is a good debate whether the
approximation can be done better by adding more sensor input and diverting R&D & processing resources towards fusion as opposed to improving the results that can be obtained from stereo image sensor. It's not obvious to anyone. And nature seems to inform us that most large brain animals evolve to rely heavily on two eyes instead of 16 eyes + lasers. This is an interesting discussion, but the issue isn't 'tesla could just bolt a Lidar box to the roof and magic, but they want to scam you out of a few extra bucks'. That is a moronic idea.
Paid? By whom? At some level the experience might be useful, but we generally pay interns a decent wage.
Unions are the obvious example where ICs have input into the pay system design.
Because its is a really stupid thing to name a protocol...

Given how there is a genuinely historic, still actively used protocol with the same name. About the only thing I can think of that might be stupider to name a newly created protocol today would be some variation of "TCP" or "IP".

The "AT Protocol", or more properly the Hayes AT Command set provided the fertile ground for two decades of modem compatibility work and eventual standards and helped fuel the very earliest growth of general public access to the internet. While not technically the exact same command set, the GSM standards for sending SMS messages over all cell networks, use what is effectively a derivative of the AT Command set, and to this day you can still find similar AT style "derived" commands in the heart of devices using cellular modems as part of the software that initialises a data connection out to the internet via a modern 4G or 5G modem.

It's just such such a spectacularly bad name for anything new to do with communication of any kind.
I may be mistaken, but it looks like you brought up email in the first place.

>Centralisation is more convenient in almost ALL cases, even in email (nobody except people on HN host their own email)
Even that solution wouldn't work today. My cards are all moving to a smooth surface with the card number printed on the backside. I still have a few cards with the raised numbering but each new replacement card I get, as the old ones expire, is the flat style.
> which is apparently just repurposed Twitter stack.

What makes you say that?
Is this for a single request or concurrent? With concurrent requests I've saturated 5 gigabit symmetric with S3 and B2.
I mean every NYT and washpo piece I've read about this election has at the very least touched on, often dwelled on, the Lula is a crook bit. What they rarely mention is the judge was buddy buddy with Bolsonero and collaborated with the prosecution behind the scenes.
Even if there is 0 rigging or fraud whatsoever, the mere possibility that there could have been such hurts trust in the democratic process.
> Either a lot of that previous wonder-talk was actually a lie, or there's something else going on here.

Tesla dropped radar and ultrasonic due to supply shortages. Nothing to do with their AI being smart.

Many first-hand reports on Tesla fanboy forums on how no-radar and no-ultrasonic autopilot is far worse than with the sensors.
Tiptap Editor – Collaborative Editing
This sort of thing is being done as far as I know, but I'm not aware how big a customer you have to be for your ISP to care about such notices. Perhaps so large that you've nearly got enough capacity to handle the traffic yourself anyway.

It also creates a nice DoS vector: if I want to not take an exam today, I'll just do a little ping flood from the school network and get banned for a while. Similar to account locking on 3 invalid attempts, except now you can block everyone at once as soon as you're in the network or on the same ISP.