skysight-inc/HackerNews huggingface dataset:
> “The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both _unencrypted data, such as website URLs_ …”

Other threads here have discussed the potential for this collection of sign-up information and URLs to be used for blackmail and to discover hidden services.

There is another major problem: mapping these URLs to existing breach dumps. The attacker now has a list of email addresses and associated URLs. From existing breach dumps (haveibeenpwned.com), they can now try all known passwords associated with these email addresses on all of these URLs. Many passwords stored in LastPass are repeat passwords, and they will gain access to many services without any brute force needed.

There will be a class action lawsuit for this gross negligence in security and false and misleading documentation and marketing materials.

My hope is that LastPass is forced to liquidate all assets and distribute them to their former customers, in addition to being liable for damages and wasted time related to migration to another password managememt solution, not to mention suffering related to any potential blackmail or disclosure of proprietary information.
Sure, also Musk’s behavior on Twitter is bringing a lot of negative press, and the fact he liquidated a ton ton of host TSLA stock to finance the operation.

But indeed markets are not exclusively driven by rational thinking, just look up “head and shoulders” in the context of stock charts. WTF is that? Horoscopes? SMH
I definitely dreamed of more powerful computers, but working using libraries that wrap libraries that wrap libraries (and on and on) and never needing to think about the hardware was not something I really anticipated. There’s something nice about working with hardware and software that calling it LARPing feels dismissive. Arduinos are fun in a similar way and aren’t medieval.
They could trigger a crushing ceiling when a monsters out-state is consumed, destroying the monster. In nightmare mode, the monster would shortly thereafter be respawned to its original location, ready to take on another value from its inputs.

edit:

>The respawning happens after a randomized time delay (roughly 8 seconds to 5 minutes) - https://doom.fandom.com/wiki/Spawning#Monster_respawning

for particularly subjective definitions of 'shortly'
That's like going to a depressed person and saying "come on, cheer up!".
For others curious about the popularity levels, it does show approximately a doubling in Google Trends over the last year: https://trends.google.com/trends/explore?date=today%205-y&q=...
Well the fact that somebody pays for somebody else to show me ads is useful to all of them, but it certainly isn't useful to me...

I'm not saying it's illegitimate in any legal sense. But morally it is not so clear.

> doing the entrepreneurial endeavor is just trying to improve their own situation

This person said they work as an engineer on growth teams in Silicon Valley, which is hilariously appropriate by the way, so they presumably have plenty of money. They're doing morally dubious things just to prove they can!
> I have noticed this gloomy attitude from many people my age, a sort of existential despair and belief that we sit somewhere near the end of the world as we know it.

Don't we? Almost every aspect of our lives has been captured by corporate interests, wealth inequality in many nations is approaching a critical point you'd dub "wage slavery", the internet turned from a place of discovery and joy into a dead space filled with ads, ghostwritten garbage, and increasingly addictive social media walled gardens.

Year by year people are lonelier and more addicted to electronics, by design. Media/news outlets are for the most part very obviously aligned with gov/corporate interests while social media are algorithmically amplifying radicalisation and outrage in order to commodify and sell what should be our private data.

It's also clear that, globally, profit margins take precedence over addressing global warming, constantly declining mental and physical health, systemic issues in our society, or with COVID, even their lives- we're going to be seeing dozens of millions of people disabled by long COVID a year for who knows how long now.

I think it's simply becoming very obvious to everyone that the entities that have power- governments, corporations- are guided by inhuman incentives misaligned and often directly contrary to our collective wellbeing, incentives constantly empowered by technological advancement that only they can afford to develop and deploy.

It might not seem like it because it's happening so gradually and our immediate surroundings don't change as fast, but we're already basically living in a cyberpunk dystopia.
It still doesn't have a concept akin to use-flags, which is what distinguishes Gentoo from Linux from Scratch, see https://github.com/NixOS/nixpkgs/issues/12877. The fact that Nix doesn't have these is also one reason why it's easier to cache than Gentoo packages.
I use a googled for both home and work pretty extensively, including Google Calendar, Keep, and Assistant, plus Tile and YoLink(Which loses most of it's value without notifications).

Carrying two phones seems like a lot of stress, I generally like to minimize the number of objects in my life as much as I can.
> At some point the buck stops.

I'd like to think so, but I'm getting the sense that maybe not. I've been observing businesses having to be incredibly tolerant of the poor performance of new hires, I guess because they can't find better. In academia, it's been getting harder for decades to hold to past standards.
I'd say that all ethics is off the table if any of these scientists enjoys a chicken burger for lunch, like millions of people doing all sorts of jobs.
A lot of people also like to signal virtue for fake internet points.

"On the Internet, nobody knows you're a dog"
also take a look in .NET counterpart: https://dev.to/azure/exploring-net-webassembly-with-wasi-and...
Thank you very much for your hard and important work!

And a special thanks for not forcing us to use a slack channel!

Hopefully other OS projects will follow.

Good health and all the best for 2023!
2023 can be a tricky one. Let's check what factors will be important to succeed when launching new startup.
Does/can this lead to any inferences wrt/ function, or is it just proof-of-concept with regards to structure for now?
HN is biased in its own ways, and Nix is one of such topics. It’s way more over-represented here, and I barely hear anything Nix outside.

Also, Nix (the tool) has always been independent of NixOS, so running it on something else isn’t a stunt at all.
Probably not, but since TSLA is a highly traded, and somewhat overpriced and volatile stock, it makes sense that every little piece of news will make it move.
Battery replacement must be 'easily' achieved by consumers – EU
You might be interested in this repo that converts asmtutor to Arm64. It's not the most faithful port though:

https://github.com/lirorc/arm-asm-examples
The problem with saying that teachers will have an incentive to make a bad school better is that they can not hope to compensate for massive socioeconomic differences. If you pay solely on absolute results, all the good teachers are going to go to schools with favourable intake profiles, which are likely to be strongly correlated with house prices. This would be a further driver of inequality. There would have to be a realistic scaling factor, looking at improvement, perhaps, rather than absolute results.
These aren't precisely the specified goals of Nix, but things I appreciate as a consequence of its design:

(1) If a build works on any machine, it will work on yours. Package builds are isolated and reproducible. For example, setting up Plasma is as simple as `services.xserver.desktopEnvironment.plasma5.enable = true;`, every time, in every environment.
(2) Environment configurations are declarative. You will always know what a given host or shell has installed because you have to write it down.
(3) Nixpkgs is _by far_ the largest package repository of any package manager, and packages are updated very quickly.
(4) With home-manager, software can also be configured declaratively; my preferred tmux configuration will always stay in sync across all of my machines because it's managed by Nix, not ~/.tmux.conf.

Following (1) and (2), executing[1]

$ git clone https://github.com/xyz/nix
$ nixos-rebuild switch --flake ~/nix#host

On a fresh NixOS install will create an environment identical to that given host.

[1] Don't quote me on the specific syntax. But it's roughly this simple :)

Addendum: And as a consequence of Nix being separate from NixOS, if a package builds in Nix, it will work on any distro.
Helm, registry, firewall, ingress, reverse proxy, these are all concepts that whoever sets up this hypothetical staging environment will have to know about, and will also have to be a developer (in order to care). So basically you need a senior dev to either love kubernetes or learn enough of it to get the job done. This is what I mean by "harder".
John Simon was an excellent critic and probably the closest modern analog to Mencken. He died in 2019.

https://en.m.wikipedia.org/wiki/John_Simon_(critic)
> Windows probably on par if not more for "work stuff" but falls badly in the coding & tooling department.

Given the option, I rather spend my day on VS than XCode, and C#/F#/C++ than Swift/Objective-C, but to each their own I guess.

And then there is the whole thing about where macOS Server end up.
At least where I work we were forced to listen to a couple of lectures from people saying exactly this as part of the "DEI" initiative. The second one of course started with them reading the talmud at us.

The whole thing felt like a parody of itself.
Slightly related (funny, for me) thing I came across recently. I was looking into why some orgs prevent you from changing the Windows domain password if it has been changed less than 24h ago.

Turns out there's a reason for this: "Setting the number of days to 0 allows immediate password changes. This setting isn't recommended. Combining immediate password changes with password history allows someone to change a password repeatedly until the password history requirement is met and re-establish the original password again." [1]

[1] https://learn.microsoft.com/en-us/windows/security/threat-pr...
> somebody pays for somebody else to show me ads is useful to all of them, but it certainly isn't useful to me...

presumably the ads being shown has subsidized the usage of the app that you're using for free. So i dont think it's not useful to you - it might be an annoyance, but you've made the trade to use the app for free (or for a lower cost than it otherwise wouldve been).

> They're doing morally dubious

and different people ascribe different moralities. I dont think there can be one universal, objective, moral standard to which you can use to compare actions.

This is why i use the legal standard - at least it's an objective standard that the majority of people agree.
Do you have one that can explain the operand syntax for the instructions that have operands starting with 'v' here:

https://gcc.godbolt.org/z/16a91n4zc
Automation is nothing new. By contrast, full time jobs are a new thing. Not having to spend most of your day getting food, water, and heating is new. We just have other ambitions besides feeding ourselves and keeping warm. That's where you end up working 15 hours/day.

AI won't change lifestyle much more than the other things do.

If you're not already forming meaningful relationships and communities, you won't when more things are automated. That's where the dystopia is: everyone is chatting with real friends constantly, and yet more lonely than ever.
In my opinion, authorities avoided regulating this space because they already have a precedent. They convinced Bitfinex to use multi-segregated wallets to store customer funds, and this resulted in the Bitfinex Hack. My guess is that authorities are probably keeping too careful when it comes to regulation.
I also use pass (synced via a git repo) with an android app for my phone and an ios app for my ipad.
Windows allows you to use a PIN for regular device logon - so you have a longer, more secure password for general use of the account, but an eg 8 digit numeric PIN _only_ for that device.
6 in 10 employers require monitoring software for remote workers
> > The Clang static analyzer [1], used through CodeChecker (CC) [2], do support CTU (enabled with `--ctu`). I'm very happy with the result on the code I'm working on.

> I have done some preliminary testing with this on the OpenZFS codebase and I am less than happy with the result [...]

A question: have you verified that the Z3 support is enabled in the LLVM toolchain you use for Clang SA? It is in Debian Bookworm, but not in Buster, and from memory I don't think it is for Ubuntu 20.04 (LTS) due to a packaging snafu.

I would expect the lack of Z3 support to lead to a lot more false alarms in a FS, as the analysis with only the Clang SA build it range analysis will be basic and won't understand anything related to bit fields and operations for example.

The `llvm` package must depend on a `libz3-4` package, recent enough (on Bookworm it's 4.8.10, but IIRC anything >= 4.7 would be used). Another way to check could be to use the CodeChecker `--z3-refutation`: this is enabled by default if LLVM has the Z3 support, but if requested explicitly should fail if not (untried, TBC).
If pdftk can't do it, then inkscape scripts probably can.
It was treading water but keeping the head above the surface. Now in the next part of the analogy someone showed up with a lead lifebuoy.
Honestly, these days you'd be better off learning Tailwind CSS[1]. I previously used Bootstrap, but Tailwind CSS is so much nicer.

I prefer Tailwind CSS over Bootstrap because it is a utility-first framework, allowing me to style elements directly with low-level utility classes, rather than relying on the predefined styles and components of the framework.

The Tailwind folks have done a good job making it highly customisable. Ultimately, it comes down to personal preference and needs.

[1] https://tailwindcss.com/
There is a lot missing here. Getting the red blood cells out of the way may be a necessary condition for transparency but it isn't sufficient. I mean, if you drain blood out of a body and replace it with a clear liquid (think embalming fluid), you don't end up with transparency. The tissue has to be fundamentally transparent, but for those pesky RBC's.
I had heard no shortage of warnings against using Lucene/elasticsearch to host my own basic search. But it was incredibly easy to implement and about as painless as running an apache server. For a self hosted project I can recommend it. Is it Algolia? No. Did I need Algolia? Also no. But it has been running for 5 years with barely any need to touch it once it was set up. Happy days for a hobby project, or a project with on-premises requirements.
Perhaps, but these two things are very very different, and while I think your observation is apt it only exists at the margins (i.e. on twitter).

You can steelman an argument for supporting Ukraine in their war that goes something like "bleeding Russia dry means they won't be able to enter into the Pacific as a co-belligerent with China in a potential WWIII scenario".

Similarly, you can steelman an argument for banning TikTok that goes something like "this algorithm can nudge people into believing certain things in a measurable way, and it's bad that an adversary (PLA) has the ability to do this in our country, so we should stop that".

GOP skepticism of support of Ukraine is linked to that aforementioned goal, which we've probably achieved at this point. Why continue to print money and weapons and send them to a place 99% of America couldn't find on a map without googling, especially when this adversary has been shown to be a paper tiger?

Democratic skepticism of the TikTok calamity is, yes, linked to Trump Syndrome to a certain extent, but I think its also an adherence to boilerplate neoliberalism where you let companies compete in a globalized way, and banning TikTok because its Chinese has a tinge of racism (not me saying that, I'm outlining why the Democrats would be skeptical of a ban).
It varies by the runtime, and the codegen of the WASM itself. From some benchmarks & anecdotes I've seen, the faster runtimes (v8, Spidermonkey, WAVM) are within about 10-50% of native speeds, give or take. There's also some runtimes (like Wasmer & WAVM) which provide the option to AOT compile your WASM module to native. In those cases, the gap from native is much smaller. But so far the JIT for WASM is just immature.

That said, from what I've read, it looks like starting up a new WASM instance is pretty fast, so some places are using it for when they need to spawn up tons of instances all at once, without having to wait for a whole process to warm up.
People that keep repeating that matra really don't do serious Windows development.

GPU debugging, DDK support, ETW debugging, SQL Server integration, GUI designers for Forms, WPF, UWP, MFC, mixed mode debugging across .NET languages and C++, COM/WinRT IDE tooling,IIS integration,...
> drugs ... slot machines

i would assert that drugs or slot machines both provide value - they are entertainment, and the people using them are deriving value out of it. Why is that those people's enjoyment doesn't factor into society as being positive? Are they somehow not part of society?

If you imply that because they must've committed a crime to obtain the money to pay for their entertainment, then it's not the entertainment, but the crime that's negative to society.

If you imply that slot machines are harmful to the players, and that they're better off not using it, then my argument is who's to say that it's harmful? Why is that there must be a negative moral attribution to using it?

Edit: i would agree that "rent seeking" is bad, but it's hard to actually specify exactly what rent-seeking is, so i will leave it to someone else to discuss.
The traditional desktop is dead, but we’re getting app-based desktops - something look similar, but with completely different ecosystem from developer to consumer.
Then what does the "Full" in Full Self Driving stand for?
Markets aren't rational, but they also aren't stupid. if this is really just a "pre-discount" on the January subsidy, wouldn't that be priced in? It could be less informed retail investors panic selling due to Musk related news, etc. But a panic sale is a panic sale, regardless of the cause.

And, why would they need to do this if the subsidy is likely to kick in on January 1st? They're offering this major discount to increase sales in the two week period between now and the new year? From what I can see it isn't even 100% certain that they'll qualify for the $7,500 subsidy. Maybe there's something about corporate accounting or whatever that I'm not understanding here.
I don't think a separate desk works if you turn off your tools. You likely have to climb up a mountain or at least a cave with no wifi.
Agreed that there is nothing quite so unified and easy as USE flags for compile time options, although nix happily lets you ex. override build options per-package, and I think overlays let you do large scale changes.
I’m not sure about job safety for both of you since the function doc says what it is and it’s definitely not searching for primes :)
I've actually implemented the Game of Life in Doom engine.
But I've used a significantly stronger "computation model" - Boom engine, which provided scrolling floors, and more actions being possible to be triggered by monsters.

It sound like an interesting exercise to make a vanilla-compatible variant of the map.

You can find the post about it here: https://www.doomworld.com/forum/topic/131881-conways-game-of... and the code: https://github.com/pwiecz/conway.wad
It’s under experimental features in 4.14. It’s the default where available in 4.15.

You might need to upgrade both docker desktop and macOS.
I don't understand your point? The whole article being discussed is about tons of crap getting sold.
With a problematic "Full Self-Fighting" option.
> Apparently GitHub accepts commits in the future

Of course.

And this is made very annoying by github also insisting on reordering commits “chronologically” rather than topologically. If someone fucks up their local date (because they wanted to test something and forgot to reset it) you get a commit permanently pinned at the top of a branch until that date passes.
They're a lot more rational now than a few months ago. Or are you (still) on the buying side? If so then you have more guts than me.

The whole Twitter saga has me worried about Musk's mental health. Either that or he should rename himself 'CLO' (Chief Liability Officer).
> Because Nix is a functional package manager...

I'd explain "functional package manager" as "package manager where packages are declared as a function of their inputs".

e.g. a package's inputs would be the compiler used to build it, and the source code.

One motivation for doing this is ensuring that a package's behaviour is reproducible.

There are all sorts of neat benefits this ends up allowing.
Part of me is fascinated by this and thinks it's a great idea, then the cynicism kicks in and I start thinking of how frustrating this could be when Comcast finds it.
In the comic, I believe the idea is that this entity is moving the rocks by hand, but following the rules of computing which slowly, but steadily, creates the world as a computer simulation. And in this case, the qualia would be an emergent property of that simulation, but how that happens or whether it happens at all is a much bigger debate...
So how you do you single step GPU shaders on your superior tooling?
Using "password manager for everything" comes with a critical disadvantages of making the pass mgr a single point of failure, increasing attack surface area. Take an example of recent Lastpass breach, I am pretty sure it will lead to hacking almost all services for some Lastpass users. Although Lastpass is saying - don't worry, your passwords are encrypted with your master password and it will take million yrs to crack them. No, it won't take even a month/day to crack master password of many of those users. You're overestimating people's ability to create strong master password and the efforts needed in cracking a password.

I'd rather be very specific in suggesting password managers, use them only for non-critical services.
SBF was lobbying for exactly that
Ask HN: Non-technical books for technical people?
What non-technical books would you recommend to technical folks to improve their writing skills?

Edit: by "writing skills" I meant general writing skills and not just technical writing.
Great question. I think of it as follows - if I can just write some operational Python code and "deploy" it, without needing to install/upgrade/maintain systems software (k8s/DB/feature-store/etc), then I have built a serverless system. What's cool now is lots of these services have great free tier and you can run serverless ML systems without paying anything.
A looped barrel that aims straight at the threads. The tank equivalent of a footgun. Aka TurretLoop, now for $420 at your nearest Tesla dealer, pre-orders only while stocks don't last.
> You might be able to appeal to NIST standards,

Agreed, huge thanks to NIST for the sane password policy recommendations. While it is still an uphill fight to bring sanity into this mess, being able to quote NIST and say we're following their recommendation has been very helpful.
Addiction is when one doesn't want to do what they know is best for them. When they tested dopamine on rats, the rats would die of starvation as they triggered dopamine. Knowing the right thing to do doesn't come with the desire to do it.
iOS is not majority, not even close, Android dominates the smartphone market. Android runs on Linux, not GNU/Linux, but definitely Linux.
I've used nix on Ubuntu and AlmaLinux. I'm betting that nix works on all the distros you listed.