skysight-inc/HackerNews huggingface dataset:
What is your experience in the field of cybersecurity?
What are the most common cyber threats that organizations face today?
How do you stay updated on the latest cybersecurity trends and threats?
Can you explain the concept of "defense in depth" and its importance in cybersecurity?
What is your approach to risk management in cybersecurity?
Can you describe your experience in incident response and handling?
What is your knowledge of cryptography and its use in cybersecurity?
How do you ensure compliance with relevant regulations and standards in cybersecurity?
Can you discuss your experience with network security and firewall technologies?
Tim Cook has certainly not taken 22Bn off the top of his legally compelled purchase lately.

(i’m very much not holding my breath for the vr/ar goggle thing, though)
No idea, probably not very well
>A great example here is the ubiquitous status meeting. Everybody troops into a conference room for an hour and takes turns saying things to the boss while everybody else's eyes glaze over. This lets the boss feel powerful and important, but it's a giant waste of time. The POSIWID conclusion is that organizational effectiveness is very much secondary to reinforcing the dominance hierarchy.

This is a good point and resonated with me. It would be a better use of the employees time (and thus presumably better for the company) if the boss walks around, and sit down with people to have a chat about the status of the project/status in general. However this would take a lot more time for the boss and probably doesn't feel as empowering as well, so all hands on deck, lets use 1/8 of today to sit and do nothing. I think having a 1 on 1 would help people be more honest about their status, and maybe even the group dynamic in their team as well. I have been a consultant where we were 10+ consultants plus 2-3 internals in a weekly meeting. It baffles me that the customer wanted to do something that costly and ineffective.
Monster-drinking, giant truck-driving redneck here for some perspective:

We have no class. It’s kind of the brand.
Politeness laws don't. They calcify and oppress.
Yes, but to me it's just a white rectangle inside a black one
https://raw.githubusercontent.com/leoadberg/UnknownPleasures...

Or just a silhouette
https://github.com/leoadberg/UnknownPleasures/blob/master/im...

..so i was wondering if i was misunderstanding something.
You can also create your own bot in a serverless way.
I watched his interview with John Carmack and I couldn't stand him. Carmack was super knowledgeable and professional, Friedman looked almost bored and not really interested - also wasn't able to follow up on some of the things Carmack was saying. Just struck me as not the best interviewer for that interview - I'm impressed Carmack decided to sit through the whole thing.
Who said I wanted to spend only $500?

The issue is more this stuff is brought in to justify the garbage end of the spectrum then creeps into the rest of the spectrum because its normal and the lower end didn't complain.
Except most of the time I don't want to spoof my timezone, don't want weird spacing around websites, and do want to remain logged in to websites.

> How do I stay logged into specific websites between sessions?
> It’s not possible. It’s an action to combat tracking.

Turns me off immediately
Sounds great for the audience it’s probably intended for.
> It's not wrong, but any "citizen" organization you can imagine to implement whatever policy it is you want[1] is going to be isomorphic to a democratic government.

No. Government is a monopoly usurped by violence.
It's a cool idea to preprocess an image with minuscule changes that make it more suitable for compression with fast LZ codecs. However, I don't buy that this is the future.
Maybe all those suggesting and promoting these things should hand over all their assets for equal distribution. But as always, this tribe of people who think this way are always keen on redistributing other people’s things and wealth.
Seriously, this is the most obvious attack vector imaginable, and there is not really any mitigation for it.
The UK took a different approach to most other countries; and IMO was the correct one. Something like 98% of properties could get at least 30meg (via VDSL2, actually more likely to be closer to 80mbit) down, and this has been the case for nearly a decade. 50% of homes have always been able to get much faster speeds via DOCSIS cable from VM (though I will caveat with that that until VM enabled DOCSIS3.1 across their network recently it could be very hit and miss congestion wise).

In the past few years though there has been an explosion in FTTH build. 75% properties can get gigabit service now which is increasing by around about 1% every month.

The priority a decade ago really was on getting the entire country up to 'usable' internet speeds, rather than having a lot of FTTH in some areas and then very slow DSL in many other areas. Only 0.35% of UK properties are below 2mbit/sec down now (unusable), which doesn't include 4G/5G coverage, so in reality it's likely only 1 in 1000 households have utterly terrible connectivity.

So while the UK doesn't rank top of the list of median download speeds it is far less likely you are going to have bad connectivity, which IMO is a greater priority than raw download speeds.

Very few people actually need more than say 100mbit/sec day to day. It's actually hard to get gigabit around the house; most powerline adaptors and wifi solutions top out around 300mbit/sec in my experience, so unless you have ethernet in your house (very rare), the limiting factor is now on in home connectivity, not the external ISP.
Gitlab is a bit weird in that regard. Their standalone self-hosted use of it is great, but overall discovery is extremely poor on both self hosted and cloud editions.

They seem to have based the whole thing on the way Bitbucket works and completely ignored that being able to find a repo you've not been directly added to would be slightly useful.

If someone from gitlab is reading this and thinking "But you can find things" - you're blinded by the issue being an internal user. There might be ways of doing it, but its a convoluted mess and doesn't come close to github in that regard.
I understand. But as you seem to hint at, it seems that "declarative" logic is still an imperative concern due to insufficient specification of the declarative framework.

Which is fine in some cases. It is still control flow at a somewhat meta level.

But taking the example of a declarative definition of a UI tree, changing node identity using "declarative" if statements seems like a breach or even a smell from a declarative point of view.

The same way, for eachs are not necessary in the declarative layer. That can just be array iteration in the imperative/data layer.
What shocked me was that 2 months ago during an interview he said that he does not understand why we would need decentralized services (web3, defi). Then 1 month later, when SVB collapsed, he literally started crying on Twitter. I would be interested what he says now. I think it's clear that how the blockchain community represents itself via social networks is not great, but I don't trust anyone who doesn't understand why it's absolutely necessary to have decentralized finance. Not sure if Sam doesn't understand it or has political/other motivations for his public opinion about this.

Here's the timestamp of the interview I'm referring to.
https://youtu.be/57OU18cogJI?t=1010
I like this, especially because it's in go. So you can dump it on any small system without having to worry about a maze of dependencies. I'll give it a try!
No more or less than if I had paid a ghostwriter to produce the first manuscript. writing a book is a daunting endeavor. Having a book allows me to work on the project with my editor's mind, which is a much more plentiful resource than my creative mind.
Is that the wealth distribution among white males or the wealth distribution among the population as a whole?
There is something Wolfram would call computational irreducibility (related to the Halting Problem), which means even though the simulation is just a deterministic mathematical function, to know what happens in it you must run the code, and that may require lot of memory and compute along the way even if the universe ends in an heat death.

In fact universe is probably stored by a seed (42), along something like 10 lines of definition, and 100 line of code would be enough to implement it in a naive version (Physicists sell tee-shirts with some pseudo version of it).

Morpheus would say : "There's a difference between knowing the path and walking the path..."
>Even a cursory search will inform you this is false

I did a cursory search and instantly substantiated the WSJ's claim:

https://www.nbcnews.com/news/us-news/after-san-francisco-sho...

>In an interview with NBC News last week, Scott suggested that California's Proposition 47, which voters passed in 2014 and lowered criminal sentences for certain nonviolent crimes like shoplifting and check forgery, is being exploited by those who want to commit theft. The initiative set a threshold of $950 for shoplifting to be considered a misdemeanor, which doesn't prompt law enforcement to make an arrest, rather than a felony, which could incur harsh penalties like jail time.

Just give up the semantic games already. Walgreens is closing many of their stores in SF due to crime. Your last link pulls the trick of acknowledging objective reality in the first paragraph, then inventing fanfiction to handwave it away for the rest of the article:

>One of the stores set to close, on Ocean Avenue, had only seven reported shoplifting incidents this year and a total of 23 since 2018, the data showed. While not all shoplifting incidents are reported to police, the five stores slated to close had fewer than two recorded shoplifting incidents a month on average since 2018.

Store owners aren't reporting thefts of under $950 to the police because the DA and police told them they won't do anything about it, which is the point I have proven that you keep trying to dodge.
I don't know if it's still the case but the default state of stable diffusion when creating women was to create huge boobs. Also all the men and women were lookalike with some difference like hair colors and skin colors (but it may well have improved a lot since)
If you trust Mullvad to see all your traffic (including every IP you connect to), it seems okay to trust them to see your DNS queries (that will return the very same IPs you will later connect to)
They probably applied an NSFW filter since :)
I dunno, you can generate as many images as you want in slow mode right?
Perhaps. Less fun, though.
Most of the altnets are not government funded - there was a ridiculous amount of money put in them from the low interest rate period, many many billions. I very much doubt they will get a good return given the crazy level of overbuild going on. I have now 4 separate infrastructure-wise FTTH networks available to me in my London apartment.
Assuming the heuristic follows triangle inequality, then it is A*.
I recently rolled out my first full software product. Some of my code is OK to be open-sourced, and some isn't. I considered GitHub, but it's just too Microsoft-y now. I ended up rolling out a Gitea instance. It doesn't have feature parity but at least my code is on my server and there aren't any AI's / MS employees reading it (I hope!)
Okay, but that's a rounding error. Gigabit internet is widely available, I'm making preparations to upgrade to 10G.

So on my current connection, that's maybe 2-5 seconds of download time. Meanwhile, the router is on constantly anyway, so whether it's 200 MB or 400MB makes next to zero difference energy-wise.
Ask HN: Best way to “donate” dev hours to charity?
Hey,

I work at a service oriented dev company and from time to time we have some bench time to utilize. I'd like to keep people engaged on projects and ideally exposed them to best practices as much as possible.

What's the best way to find places to "donate" our time to certain charities or non-profit organizations?

Right now people are going out to our most used third party open source software repos and actively contributing there, but I'd like to do more of a full on apps.

Thanks
Conversion therapy is the process of industrial scale bullying LGBT children into presenting as straight, with many such places going miles past the line of child abuse.

It's nothing to do with SRS, which is not offered to children anyway, so your dislike of that is irrelevant.
I decided to test it out on a website[0] and it does seem that the useragent goes by the Firefox name:

Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0

On my Firefox:

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0

It's interesting to note that the Mullvad browser seems to be based off on Firefox 102.0, which came way back on June 28, 2022:

https://www.mozilla.org/en-US/firefox/102.0/releasenotes/

[0]: https://gs.statcounter.com/detect
When I was kid in the 1980s, I wanted a big C-band satellite dish so bad. Never could convince my parents to get one though.
Presumably this: https://www.urbandictionary.com/define.php?term=CNC
> ridiculing politicians in China is taboo

You mean the Chinese politicians that are in power right? Chinese propaganda ridicules constantly politicians from other countries.

Obviously this is just a well calculated move. It's acceptable to mock certain kind of people/groups. That's all there is to it. We don't need to go into Chinese psychology.
It's in the same vein of using blockchain to track real world objects or use CAPTCHA to fight bots. It all fail on the human-machine interface because the definitions on what is real, where something starts and ends falls apart on edge cases and computers are all about edge cases. Consider a fail-proof CAPTCHA, me personally or through hired humans solving it doesn't prove that the rest of the operations are not conducted by a bot. Consider genuine item tracking with blockchain, it still depends on me digitising the real life item and the blockchain can guarantee only whan happens after that.

So this is a weak attempt to solve the human-machine interface problem. Put all the other creepy stuff aside, scanning a retina would not prove that I'm an individual who is entitled to the 25 tokens. The first thing people would do is to exploit as many people as possible to take their tokens.

The whole exercise of machine scanning a real life object to verify authenticity is useless.
https://www.mentalfloss.com/article/91594/theres-wire-above-...

There's a wire around Manhattan. And it costs 100k a year to maintain it.
You could poison your texts in various ways, but the same kind of things that might keep an AI or LLM from digesting your work, are probably the same kind of things that affect SEO and accessibility negatively.
Would there be anything of interest to an English speaker though? When I was in Taiwan I found very few people that spoke English.

Having said that it was 20 years ago :P
Am I being unfair, but doesn't this article seem a bit of a selfish whine. I feel sometimes we forget how amazing the things humans are doing to.

We had a person and his teams literally build re-usable rockets and then blanket the earth in thousands of satellites, largely on private funding. This seemed unconceivable 10 years ago. This of all the people tat said this was ridiculous and bound to fail financially or technologically when announced.

Then a few years later someone is 'my internet in the middle of nowhere is a more expensive, the price changed because its so popular and has dropouts"...like your using internet from a fleet of more satellites put up in a couple of years than humans created in the 50 years before.

I think we need to step back and take perspective on this one. Its freaking incredible we have this services. Its fairly new tech and will probably get better and better over coming decades.

For me, Starlink has been a game changer living in a rural area that still had copper ADSL. Its more expensive and sometimes (not often) has dropouts but I still marvel at what has been achieved.

Less often these days but sometimes I still got to the Starlink maps, spin the globe and feel amazed. Try it: https://satellitemap.space/
The population density is a correlated number, but it's not necessarily an issue, which makes this into one of my pet peeves.

You could have a gigantic nation which is completely centralized into one city, giving you a super low population density on paper.

It's not the case in any of your example, so not really an issue here. Nonetheless...
> Or you built a pretty amazing orthodox file manager with it (DC).

Fun fact: Double Command is a clone of Total Commander, itself also written in Pascal (the 32bit version is compiled using Delphi and the 64bit version using Free Pascal / Lazarus).

Also a somewhat popular archiving tool in recent years, peazip, is made in FPC / Lazarus too.
I thought it'd be possible by simply turning off "Always use private browsing mode" setting, but it doesn't seem to work. Sessions are still cleared upon browser exit.

In my case, I had to turn off that setting because without it, 1Password wouldn't work.
I think the article dances around the real issue when it comes to the declarative vs imperative debate. The discussion should always take into consideration the complexity of the system, and its dynamic nature. Systems tend to grow in complexity over time and the declarative constructs that were once enough to describe the state of the system start to require ever increasing complex hacks that resemble imperative code. At that moment the declarative interface for the system should be redesigned, with the new complexity moving into the imperative core, once again making the declarative interface/shell be congruent and simple.

This process will probably never end, as we build more and more complex systems we will find new abstractions that better fit at modeling the state of the systems, and we have to go through that process of redefining the declarative models on an ongoing basis.

If you look at the Kubernetes world, the same pattern played out. You have a declarative layer that is becoming ever more complex and hard to manage using tools like Helm, but then there is also a trend of encoding imperative operational knowledge in new frameworks and operators, that expose a much simpler PaaS declarative layer to users.
I’m not going to rehash countless internet arguments but you may take this Reddit thread and look into it yourself for the first two:

https://old.reddit.com/r/DecodingTheGurus/comments/zaeztd/_/...

If you see his Youtube profile picture it’s pretty obvious he wants to present himself as a lecturer or professor staff, which he is not.

For the latter 2 I’m sure the other comments on this thread are helpful.
AFAIK what is sold today by Unisys are essentially preconfigured emulators running on what is otherwise normal Xeon servers.
It could work theoretically. The only question is if it is economical to do so. And the answer to that is probably not. It ranks pretty low on the list of possible solutions in terms of cost and efficiencies.

Hydrogen and ammonia (you typically generate one to generate the other) are interesting as a fuel in some use cases (anywhere the weight of lithium ion batteries is a problem basically). Main use cases seem to be shipping, and maybe long haul aviation. Probably not for road transport (battery electric seems adequate there for most vehicle categories).

But as a battery/energy storage solution it makes less sense. The round trip from solar/wind energy to hydrogen to ammonia and back to electricity loses most of the energy in the process. It's doable but there are probably more efficient and cheaper ways to store the energy. You lose about half (at least, that's a super optimistic percentage) of the energy creating the hydrogen. Then some more creating the ammonia. And then some more converting that back to electricity. It's pretty easy to waste less energy than that.

For heat, simple thermal mass is very efficient, low tech, and has already been demonstrated to work for seasonal storage. Throwing away half the energy to create ammonia simply makes no sense. All you need for thermal mass is some basalt, sand, etc. with a lot of mass, a container to put it in, and some cheap way to insulate it (wool would do the job). Heat it up in the summer, extract heat in the winter. It scales. The raw materials are dirt cheap (because they are literally dirt), the complexity is low (pipes, plumbing, insulators, sand/rock).
You can't browse the dark web with this browser.
clearly, you don't know what grsec is
Seems like a mistake. I suspect there is a large overlap in the people who buy religiously domestic and the people who religiously listen to AM radio.
I may have to create an account, but it should have some weights by default.
Hmm looking the settings I saw a search engine I didn't recognize... I guess they also have a google proxy?

https://leta.mullvad.net

So I guess now you can go full Mullvad.
I'm not sure people need to announce their departure from GitHub. You may not like their use of AI but legally speaking its entirely within their right to update their TOS for this. Is it sketchy? Absolutely. But given over the years they've provided billions of dollars of hosting and compute services to the opensource community for free I'm not sure there can be much of an argument that they don't have a right to create a sustainable income source.

They undoubtely should have handled it better, perhaps even offering an option for individual repos to opt out entirely. But if they didn't do it, someone else would have.
I took the statistic to mean overall install base, rather than gaming PCs.
> because that is what Apple sheep have on their systems!

I don't believe that comment was necessary.
Yeah I’m not sure if it is just one section of the public sector this poster is referring to but my sister is a teacher at GCSE level and gets none of this.

One of my best friends is a paramedic and has decided to quit and leave the country due to the shocking pay and working conditions. He has to bail on so many social events as he constantly gets assigned to unrelenting shifts with no notice at all.
grsec are patches for the kernel.

The main exploit risk to a modern browser is javascript JIT.
Professionels in the actual field of conducting animal trials and getting medical devices through FDA approval. No one who has ever worked even just as a week as an intern in the field would ever have the blatant disregard for proper procedures they had. It’s just as insane as if Elon had said “just put a dozen or so untested self driving cars in the city center and see if they crash”. Animal testing isn’t something where you go “Oh it’s only an animal so we don’t give a fuck how we treat it”, there are very high bars that you need to stick to. People know that if they work in the field, which is why you need professionals and not just biohackers who don’t care about any established processes and just want to skip them in the spirit of “the ends justify the many animals we carelessly brutalized without any care taken to avoid it”
Then do that. It's not a video codec. The problem is computation power is increasing much more slowly than bandwidth, and is likely to continue to. 8K PNGs (by my napkin calculations) already take around 1 second of CPU time to decode. There are other solutions, and certainly better options today, but it's plausible that in the next 10-15 years, this will become the best option for fast-loading, high-resolution, 2D images. (Or texture data for 3D graphics. Or 360, I guess - not sure why that'd be different.)
Indeed, my fingerprint in https://www.amiunique.org/fp appears to be unique when using the Mullvad browser.
So it's Tor Browser, but for clearnet