skysight-inc/HackerNews huggingface dataset:
> Does this mean it is guaranteed to be able to open a copy of the executable no matter how short lived it is? This was quite a challenge for me when trying to grab it in time for hashing. I ended up settling on simply opening /proc/pid/exe as early as possible, marking it with fanotify, then putting it in a queue to read later and reporting it if it was modified before being read.

no, it just means it knows the name and path as reported by the kernel at that time.

i originally had wanted to monitor the filesystem in addition to network, since lsm allows that. however the filesystem implementation was tricky, and i couldn’t find a good solution to the problem you described: verification by hash or some other means that the path being executed is a known trusted binary.

all mighty snitch knows is the path of the executable and the argv array as reported by the kernel at the time the lsm hook is called. it’s not the best, but it’s better than nothing.

> This is a pretty impressive feature which I haven't seen elsewhere. I'm not familiar enough with lsm to know what's possible and I see you use a custom kernel. What sort of guarantees does this provide and have you come across any limitations?

i think failing closed is more inconvenient than difficult, which is why things often fail open. when using a mighty-snitch kernel, the network is inaccessible until you start the userspace process. better security might involve only allowing userspace to start once, or other such restrictions.

then again you also have to secure the filesystem, since that is where permanent rules are stored.

in reality, it depends on your threat model. i find network monitoring to be tremendously useful both for debugger and for more feeling secure. hopefully also for being more secure.

nfq, which tinysnitch uses, can also fail closed. then again you have to use iptables or nftables for that, which may in fact fail open.

> I'm not familiar enough with lsm to know what's possible and I see you use a custom kernel. What sort of guarantees does this provide and have you come across any limitations?

lsm is only usable with a custom kernel, which probably why most people don’t. basically it returns block unless it can talk to userspace, in which case it returns block or allow depending on which userspace chose.

as for limitations, currently we can’t reliably read the remote ip for inbound connections. it would be nice to have that information as well.

just looked up your username. picosnitch is cool! email me if you want to discuss further, and keep building cool things!!
Childhood Personality only weakly/inconsistently predicts Adult Ideology
>you can't just use the word protocol to change the first principles of the interaction. A bank is just doing the busywork of interacting with a borrower on behalf of me

Unless Coinbase Earn is fraudulent — maybe it is, I don't know — I would argue you can and should. In the case of Ethereum, Coinbase is providing an IT service. In the case of [other protocol], Coinbase is hiring a contractor to provide an IT service on their behalf. For any reasonable understanding of what financial lending is, there is no "borrowing" here.

>Staking isn't nothing, it's an activity that requires skill, otherwise, why does it even exist? Shouldn't a centralized computer just do all the staking/validating if that's the case?

These claims demonstrate a profound, ignorance of how these protocols work — something I'm calling into attention not to berate you personally, but so that people who stumble across this thread later appropriately discount your claims.
It will come the day that GNU/Linux is better than Windows for any kind of graphical development activities.
>they'd be extinct a long time ago if they arrived in China/Middle East/Russia etc.

There is actually a group similar to the Amish in Russia, it's called the Old Believers. They formed after a schism within the Orthodox church and fled persecution to Siberia. Unlike the Amish, many of the Old Believers aren't really integrated with the modern world as they still live where their ancestors settled in. So groups that refuse to technologically progress do exist, and can do so even under persecution and changing economic regimes.
> I mean, I've lived with XDG messing up where my config files are for several years

Why don't you set your XDG vars to where you want to put them then?

What's your alternative? Force everyone to follow your preference instead of having it configurable?
The problem remains giving police immunity from suit.

You wouldn't be getting these outcomes if police were held as equal under law to everyone else, and private prosecution was still available.

There's no need to reach for either extremes of "defund the police" and "defend the police (no matter what they do)".

All that's needed is to restore previous law, and apply it equally to everyone.
Oh huh, I was always under the impression that "X" meant "Cross", as in "Cross-Desktop Group", since they were working on standardizing things across different desktop environments. But I guess the "X" was just a reference to X11? I guess today it encompasses a lot more than X11-based stuff, though...
If you want something similar thats written in Rust instead of Java, look at Buck2 https://github.com/facebook/buck2
Add 2022 to the title
Allison Pearson meets Anders Tegnell: Lockdown was never on the agenda in Sweden
Indeed, why use Visual Studio or XCode, when one can write XML layouts by hand on gedit.
Like what is this comment? Why do people with an extremely narrow view of some political topic or politcal movement like anarchism/communism/immigration policies/etc. start posting something that dismissive. Like as if they where actually talking about the same thing, without realizing that they dismisse a delusional idea of something which has no to little to do with what the other person was talking about.
Maven 3.9.0 – Release Notes
I have seen this argument a bunch of times and I am confused by what exactly you mean. Everyone is influencing the future of humanity (and in that sense gambling with it?) What gives company X the right to build feature Y? What gives person A the right to post B (for all you know it can be the starting point of a chain of actions that bring down humanity)

Are you suggesting that beyond a threshold all actions someone/something does should be subject to vote/review by everyone? And how do you define/formalise this threshold?
I am surprised nobody has mentioned Language Transfer. I haven't listened to the Music Theory course, only the Spanish one, but I can highly recommend it:
https://www.languagetransfer.org/music
At the end of the day human power structures and trust are heavily important. We are trusting their site didn't get hacked, and if it did that we would find out about it. I mean if you can't trust anything at all, the modern internet is unusable.
In all the discussion about qualified immunity, it seems to me police unions don't get discussed enough.

Police unions appear to be a significant reason why police officers are shielded from accountability. They make police disciplinary records private [1], are why officers receive excessive overtime pay [2], sometimes including kickbacks to their municipality/town, issue cringeworthy statements [3], and pour $ millions into elections [4]. The more I learn about them, the more disappointment I have in American policing.

Why does the American public tolerate police unions?
Perhaps the better question is, who are the politicians that accept their money?

[1] https://www.nytimes.com/2021/02/16/nyregion/nypd-discipline-...

[2] https://www.timesunion.com/news/article/Police-overtime-spen...

[3] https://www.nycpba.org/miscellaneous/anti-cop-city-council/

[4] https://www.opensecrets.org/news/2022/06/police-unions-spend...
Large-scale iterated singing experiments reveal music evolution
Full title did not fit: Large-scale iterated singing experiments reveal oral transmission mechanisms underlying music evolution
There are no loans directly involved in the functionality of the Coinbase Earn product, and staking-as-a-service is just that: an IT service, not a security.
Too little, too late. Damage done. Scream "deutsch sprechen" at your children or at knife-wielding immigrant.
Firing cops is a step. Replacing cops with the same breed of cops with no difference in training is just a show.

The fired cops will just get jobs in other departments. Cops won't be better trained, procedures that lead to this won't be changed. No real change is going to happen.

Firing cops at this point is just theater. It isn't trying, it is honestly just more of the same. It isn't likely that they fire the entire department either, and it will do nothing to take care of the folks that were elected in (sherriff and prosecutor, for example).
That demonstrates possibly rather than necessity of alignment via having a definition.

Behaviours can be reinforced or dissuaded in non-verbal subjects, such as wild animals.

There's also the size of the possible behaviour space to consider: a discussion seldom has exactly two possible outcomes, the good one and the bad one, because even if you want yes-or-no answers it's still valid to respond "I don't know".

For an example of the former, I'm not sure how good the language model in DALL•E 2 is, but asking it for "Umfana nentombazane badlala ngebhola epaki elihle elinelanga elinesihlahla, umthwebuli wezithombe, uchwepheshe, 4k" didn't produce anything close to the English that I asked Google Translate to turn into Zulu: https://github.com/BenWheatley/Studies-of-AI/blob/main/DALL•...

(And for the latter, that might be why it did what it did with the Somali).
NKeys
Police in the US routinely get away with all kinds of abuse and illegality. I wouldn't be surprised, if a friendly court decided for them.
The same ones that terminate TLS for millions. Most are garbage but at least they keep the key offline. Also you can scale horizontally or only use the HSM as a CA to sign short lived host keys.

You could also use things like Nitro enclaves which have all the same specs as a regular EC2 instance.

Tons of options. They clearly chose none of them.
And sorry to reply to myself but this is not great at all

I manually added the new RSA SSH public key entry to my known_hosts file (like they say in the blogpost)

Then ran ssh -T git@github.com and got

Warning: Permanently added the RSA host key for IP address '140.82.121.3' to the list of known hosts.
Hi gassius! You've successfully authenticated, but GitHub does not provide shell access.

Then, when trying a git pull, I got this:

Warning: the RSA host key for 'github.com' differs from the key for the IP address '140.82.121.4'
Offending key for IP in ~/.ssh/known_hosts:63
Matching host key in ~/.ssh/known_hosts:64

So basically, the Offending key is the one I added manually as per blogpost?

Ok, I am in Europe, and this seems like an issue of global distribution network or something, but this is not great AT ALL, either the blogpost information is not complete or something fishy is going on

UPDATE: The replies makes clear what I was seeing those errors and make sense. Thanks

EDIT: Formatting and Acknowledge of the situation per replies
I couldn't find information on display resolution. Actually "Display" section seems to have been edited out: the section exists but no information in there. Does anyone know why?
It's wonderful; a natural market incentive for well-capitalized players to expose fraud and misconduct instead of participate in it.
In the Philippines, a repossessed car refers to a vehicle that has been taken back by a lender or financial institution due to the borrower's failure to make payments on time. Repossession is a legal process and typically occurs when a borrower is in default for several months. Once the car has been repossessed, it is usually sold at an auction or through a dealership to recover the outstanding balance owed by the borrower. Repossessed cars are often sold at a lower price than their market value, making them a popular option for those looking to buy a car on a budget. However, it is important to note that buying a repossessed car comes with certain risks, such as hidden damages or mechanical issues that may not be immediately apparent. Therefore, it is essential to thoroughly inspect the vehicle and do some research before making a purchase. https://philkotse.com/repossessed-cars-for-sale
> every github.com SSH frontend using the same private keys

HTTPS has the same problem. Compromise any frontend, and you can MITM traffic to any other front-end till the expiry of the certificate (usually 90 days).

I would really like to see some kind of almost realtime delegation - so that for example, every second a new sub certificate could be generated and signed by a HSM, valid for only 2 seconds.
Congratulations on what sounds like an ultimately positive experience.

Cool to see Norwegian on the site, but the very first Library thing I went in to had an error in the Norwegian. I don't really understand how the site works, but that put me off a bit.
I suppose those who have a problem with this would rather live in a cashless society, right?
Hidenburgh seems to have directly accused Block.

Block has systematically taken advantage of the demographics it claims to be helping. The “magic” behind Block’s business has not been disruptive innovation, but rather the company’s willingness to facilitate fraud against consumers and the government, avoid regulation, dress up predatory loans and fees as revolutionary technology, and mislead investors with inflated metrics.

https://hindenburgresearch.com/block/
I know exactly what you mean, but I am going to be intentionally obtuse and say as a joke.

Small, single purpose code, I usually call that a library, where are you finding multipurpose libraries?
Thank you. It makes sense
We have nuclear, but a lot of Americans are concerned about nuclear for reasonable reasons.

We have renewables, but those can't take up the majority capacity of a grid unless we start adding massive batteries.

Then there's grid rebalancing where we incentivize people to use and store renewable energy locally, this lessening the strain on the grid but that still results in fossil fuels or nuclear.

Hydro has been found to be environmentally destructive. I'm not sure if that was just my state or if that's ubiquitous.

What were you thinking?
There is a system-wide /etc/profile or /etc/profile.d/

Likewise, zsh will look for /etc/zshrc

And zsh will actually look at

$ZDOTDIR/.zshenv
$ZDOTDIR/.zprofile
$ZDOTDIR/.zshrc
$ZDOTDIR/.zlogin
$ZDOTDIR/.zlogout

So perhaps you can set the value of ZDOTDIR in one of the systemwide locations to use "$HOME/foo/bar/zsh/" and this way zsh will use ~/foo/bar/zsh/ as the location for the user specific .zshrc and other mentioned files for every user

https://eng.libretexts.org/Bookshelves/Computer_Science/Oper...

https://bash.cyberciti.biz/guide/Setting_system_wide_shell_o...

https://zsh.sourceforge.io/Intro/intro_3.html
People should be able to move as freely as capital and profit, however freely that is.
Cracking the ’Oumuamua Code: Alien Spaceship or Natural Phenomenon?
And be so far behind it's not even funny.

Look at AMD vs NVIDIA RTX implementations.
Nah, NVDA is a solid buy for long term. They also almost acquired ARM (Which shows where their heads are at at the very least.)

Owning ARM, the thing that is inside ya know, everyone's phones, routers, etc
This seems a reasonable timeframe to me given the scale of the impact.

Security issues are obviously very important, but equally I would be worried if they started acting impulsively immediately after discovering the issue, because there would not have been time to understand the problem and consider the options. If you jump on a solution without giving it a bit of thought first it's too easy to exacerbate the situation.
The 4080 is _25x_ faster than the M2 on pure fp32 (which is what most GPUs are doing most of the time). Apple compared the M2 to the laptop 4080, using numbers heavily biased to them (running a 4080 at 10W does tend to make it not perform, yes).

Not a single benchmark in the world has supported Apple's claim that the GPU in the M2 is that powerful. It's just yet another cute embedded GPU that does the job, but nothing more. It's made to push out 8K frames really fast, which it does because of UMA, but want demanding task will have it be eaten alive by any real GPU.
Code and data available: https://osf.io/uangd/

My source is a tweet by McElreath: https://twitter.com/rlmcelreath/status/1639161966903144448?s...
"heckling should not enjoy freedom of speech" exactly, this is just the marketplace of ideas deciding that the speaker is either bringing nothing of value to the table or that his reputation for previous speech is too poor. The idea that a Federal Judge is somehow having his free speech rights violated by a bunch of college students is insane, the man has argued before the SCOTUS and has a lifetime appointment which allows him to affect the lives of millions of Americans. It's becoming increasingly clear that "Free Speech" is just the idea that the powerful speak and the commoners listen.
> This statement is misleading/wrong. Like all other XDG stuff, it's not about the machine, it's about the particular user.

No, it's correct. "State" data is machine-specific. You might run an application that needs to generate a machine-specific identifier on first run and save it somewhere. For someone who shares their ~/.config among multiple machines, that shouldn't be synced.

> when it has files .profile and .bashrc placed directly in the user's home directory?

There's no other good option, as you may have a chicken-and-egg problem: often people put their definition of XDG_CONFIG_HOME in their .profile or .bashrc. Bash can't know where to find the file if the file tells you where to find it.

Sure, it could just hard-code ~/.config (and that would be correct for most people), but for people who have it set to something else, now they just have an unwanted ~/.config directory. Might as well just stick it in ~/ and live with it.

Of course there are alternatives: someone could set those variables via a PAM module or some other mechanism that might be able to set it before the shell even starts, but I'm not sure we should expect that to be common either. You could also use /etc/profile or /etc/bashrc, but then you have to either set it for all users, or have an if/case statement or user-mapping file that sets things according to each user's preference. If this is a shared machine where most users don't have root access, then you need a mechanism that lets users update their preference.

Yes, I get that those things are not the common case: most people have a single-user desktop/laptop where they have root access. But we need to consider the edge cases too.
A standardised laptop GPU connector could be a game changer and would be a killer feature. There have been a few false starts in that space with MXM, but they never really took off.

It’s often the first thing people upgrade on a desktop (it’s much more impactful than a RAM and CPU upgrade over the same timeframe), but is rarely an option for laptop users.
They were not "persons", they were "companies", and, as such, every financial-related action that such a company carries out (like choosing the shady bank instead of a well-established one) might in fact bring it down. That's how business works for companies.

And SVB was a shady bank, hence why it had begun to run out of funds before the VCs started losing their minds on Twitter, and also because there are many stories of them (SVB) opening up accounts and giving lines of credit much more freely compared to an established bank or even to a more cautious "mom-and-pop" bank.
API access as a service here we come!
ARM on Windows works great too. I don't know what they're talking about.
I broadly like the things Molly is bringing attention to, but there are some problems here:

1) This is presenting a bank run like it is a bad outcome for the people involved. It isn't obvious why that would be so; SVB is now one of the safest banks to park money in, and the dust hasn't settled but it seems plausible to me that the bank equity holders and directors are part of some incestuous Silicon Valley relationship where they are also major equity holders in the companies banking at the bank - ie, they've benefited hugely from the de-risking even if nominally they are getting wiped out.

2) "No libertarians in a bank run" - what, did libertarians suddenly become self-sacrificing when I wasn't watching? Libertarianism is recognising that people shouldn't be forced to pay taxes to fund these bailouts and that people should be allowed to avoid the dollar while conducting business if they wish. If the game is set up so that everyone rich gets a bail out, you'd have to be an idiot not to take the bailout. Since these libertarians aren't idiots, they took the bail out. They aren't dignified, sure, but they never pretended they were going to hold themselves up as sacrifices.

3) "the Fed’s not-a-bailout of Silicon Valley Bank and Signature Bank seems ultimately to be the right choice "

I mean, if you concede that then ok but is anyone naive enough to believe that the wealthy took everyone else's money hostage by accident? It has been clear for a decade that as long as it is a crisis rich people will get free money. Therefore, the powerful have arranged their affairs so they won't lose money except in a crisis. The easy approach is letting the rules play out to their logical conclusions. People overestimate how important the banking sector is, it makes more sense to plan how to transition through a collapse and rebuild it than it does trying to hold up all the idiots currently in charge of all the important decisions. They aren't competent, that is why the system keeps trying to purge them!

Note the remarkable resiliency of the crypto system because it keeps jettisoning all the parts that go bust without rescuing them. Bitcoin's value is more resilient than the banking system right now sans-bailouts.
> I mean, can't you just use the laptop?

The idea is that you have a spare mainboard laying around if you've upgraded. A cheap $40 case is a great way of putting that hardware to use.
> they haven't learned enough from 2008.

I think it looks like they learned a lot! I.e. make sure you get too big to fail.
No, |I do not have any confusion. Check the molecule yourself.
Thank you, yes, I missed the ECDSA vs RSA key part. Makes sense now
OpenAI has a moat, but not that large of a moat. Anyone with a couple million dollars can train a competitive LLM.
Open what up? The plugins are just a public manifest file pointing to an openapi spec. It's just a public formalised version of what langchain asks for.
Of course, I know that, otherwise it would not be so sweet.
The key was probably encoded in some way that made it hard to detect, for example, as a VM disk snapshot or a .tar.gz archive of a home directory.

Something like that must have happened anyway, since it's highly unlikely a private key is just lying around as a plain text file on an engineers workstation to be accidentally included in a push.
I'm sure thats going to work.
Yes, the class P is huge. Calling problems in P "easy" is severely misguided. We have only barely scratched the surface of this class (linear and quadratic problems), but there is an infinitely deep ocean of problems below the surface that we cannot even imagine. It is illuminating to recall Knuth's view that probably P=NP, but it won't have any practical effect.
There is a MITM risk regardless of whether they rotate the key. Except one is a one time risk and the other is a perpetual risk.

Thus rotating is the only logical course of action.
Everybody would love wearing Apple Glasses. Would probably look really cool.

I remember seeing AirPods in somebody's ears for the first time. "What a dork" I thought back then. Now they're cool and everywhere.
Kids Are Alright: Cinema's Future Is Here
Runtastic fires a third of its employees
> What desktop GPUs would you recommend for the home user with access to 20+ GB of VRAM?

I think the usual current model would be the 24GB Nvidia RTX 4090.