skysight-inc/HackerNews huggingface dataset:
Microsoft has published a more technical analysis[1] which was submitted in two of those HN stories mentioned above (which received no interest).

Microsoft have two identity services being MSA and AAD. MSA is used for consumer Microsoft accounts for use with products like Xbox. AAD is Azure AD that businesses use. When a client wants to authenticate to a Microsoft service, it asks MSA to sign a token for services accepting MSA tokens, or asks AAD to sign a token for services accepting AAD tokens. Someone has gained access to an "inactive" (but not "invalidated"/revoked) MSA signing key. It's not stated in the analysis whether Microsoft services such as Xbox would have accepted a token signed with an "inactive" MSA signing key, but it sounds like this may have been the case. It's just consumer privacy and security at stake and the attackers apparently weren't interested in that, so the analysis is rather ¯\_(ツ)_/¯ on consumer impact.

The problem for Microsoft is that they had incorrectly configured OWA API to accept tokens signed by the MSA identity services even when accessing mailboxes that should require an AAD signed token. So now the attacker could access mailboxes for all business and government users around the world (excluding GCC High, DoD, etc which Microsoft state are not exposed to public networks).

Microsoft only found out after one of their diligent customers queried Microsoft on why they were seeing logs for user mailboxes being accessed in unexpected ways. Speculatively (not in the analysis) this may have been noticed as a random IP address outside of allowed subnets accessing mailboxes at odd hours, and the customer checked their AAD configuration to ensure IP subnet restrictions were configured correctly and verified the user was not overseas.

The attacker looks to have been quite careless by accessing OWA API from very obvious red flag locations for legitimate users. For example, the attacker could have used a residential ISP subnet in Washington DC to access a GCC hosted mailbox of a government agency with a presence in Washington DC, and only done so in hours that an employee may be working from home in Washington DC. Or the attacker could have gone after soft targets like small to medium businesses that contract to the government, hoping these soft targets wouldn't be monitoring nor have the ear of Microsoft for prompt incident response. Instead, the attacker has used random dedicated hosting providers in places as far as Europe and accessed mailboxes during hours coinciding with business hours half way between the US and Europe. It's possible the attackers thought this attack would be detected quickly, and therefore were always just going for a hit-and-run approach knowing they'd get their data prior to the attack being noticed and blocked. But it does make the attacker look brazen at best, and unsophisticated and careless at worst.

[1] https://www.microsoft.com/en-us/security/blog/2023/07/14/ana...

[2] https://learn.microsoft.com/en-us/office365/servicedescripti...
Swipe down from the top shows the next few steps for Apple Maps on iPhone. Not sure about CarPlay.
I agree that often people choose to use the object versions unnecessary, but many operations (including relu) have functional versions: https://pytorch.org/docs/stable/generated/torch.nn.functiona...
A few weeks back there was a train outage and I couldn't get home.

Had to take a taxi for the first time in years.

I went out to the taxi spot next to the train station and asked how much € to Amsterdam etc.. Immediately another taxi driver runs up and tells me I shouldn't take this driver because he is not from the right area, apparently. Then they start shouting at each other while I, a potential customer was there. Eventually more drivers take sides and almost start fighting.

I walk away for a bit and ask another driver. I ask how much to Amsterdam he says: "how much are you willing to pay"?

What kind of question is that, ffs. It's 23:00 and I want to go home, just give me your price. He refuses a few more times and I walk away. Then he suddenly says €100. I say too much, he counters with €80. I say €60 so we agree on €70.

When we're on the highway he says his machine is broken so we have to pay cash... Goodbye reimbursement from the train company because he's also not printing a receipt.

Finally home I lay in bed thinking how god awful the entire taxi experience is when you're not using Uber.
Hillstart problem is when you're pointed uphill, stopped, and need to start going. Without the handbrake, the car will fall backwards when you lift off the brake. So you'll need to be good at working the clutch, or use your heel and toe on the gas and brake at the same time, or risk going backwards into the car behind you.
Beyond Boredom and Depression
And also

https://en.wikipedia.org/wiki/The_Presentation_of_Self_in_Ev...
> Google Maps advertisements on the map.

Ad company puts ad on product. News at 11. =)
I consider them to be "dog like".

Mind you I'm not in a horse barn.
And then another click away when you want to go back to normal.

Every time you do it.

It's not a matter of clicking, it's a matter of having extra steps in an already diverging workflow.
i am not exactly a fan of coding challenges and i do like laive coding, but that challenge to write an email to a junior colleague telling them how to troubleshoot an imaginary backend issue sounds like something i'd really enjoy doing.
though strangely chrome uses the security libraries from firefox. hmm.
"I’ve never seen the argument for that move beyond a bare proclamation like you’ve just made."

Do you work in an industry that requires a specific service level to be maintained? How many hours per day? What does downtime cost? What does redundancy cost?

We have situations that cost millions of dollars per hour when downtime occurs. Now how do you protect those systems?

A definition of Hubris is not believing something exists because you haven't seen it before.

Our tasks as Systems Administrators is not to make a career out of updating systems for maintenance patches. Our task is to design systems to minimize updates and then redesign systems to eliminate wasted user interaction and downtime.
It's worth noting it took a bleepin' lawsuit to officially go from the two founders to five. Musk was not part of the two.

https://www.cnet.com/culture/tesla-motors-founders-now-there...
My town built a north-south buss that has it's own street for most of the route. It ran every 10 min and was pretty useful and popular. During covid they quit charging fare and also changed to 20min frequency.

Now you may have to wait 40 min for a round trip depending on when you get to the station. This makes it hard to use the bus for a lunch errand where you need to be back in an hour.

I think the fare + high frequency system worked better.
Can you report police speed traps on Apple Maps? If so, I may have to move away from Waze.
Why would they need to prove it on an arbitrary forum?

Shouldn't their company / hiring manager have KPIs for their role and track them ?

By maintaining that job they are clearly meeting whomever's opinion of good enough to keep the job.
The lab leak theory is weird to me. Absent some remarkable discovery and a few defectors, even if it had happened, we're unlikely to find conclusive proof now. The virus has been studied enough to know that there are no "biomarkers". And if it was true .. then so what? What follows from that belief?

It's also politically linked to an odd set of other beliefs - covid denial/minimization and anti-lockdown/anti-maskers. Are we supposed to believe "COVID was a Chinese bioweapon and therefore we should have done nothing about it"?
For anyone who hasn’t been in an MRI: 40 hours is a lot.

Those things are tight; not “look where you are going” tight, but you absolutely need to tell people beforehand that they will feel very uncomfortable inside, remind them that they can get out at any time, and show them how because they will not like being in there.

I wouldn’t spend 20 minutes in one if it were not important. I’d seriously push back on an hour. 40 hours is something I’d only do if that is absolutely necessary.
>That which was asserted without evidence could correctly be dismissed without evidence. AT THE TIME the anti-vax crowd was basing their positions entirely upon anecdote, rumor, and often badly misread prepublication research and stats.

The was an abundance of evidence that the covid vaccines had a reasonable likelihood of being unsafe. Every single previous attempt at a coronavirus vaccine had failed, sometimes catastrophically (killing all the test animals), that's why there wasn't an existing coronavirus vaccine on the market. Every single previous attempt to bring a mRNA treatment to the mass-market had failed due to safety issues. Even in the Pfizer vaccine trial there were overall more deaths in the vaccinated group than the placebo group, due to cardiac deaths (although it wasn't a statistically significant enough amount to draw a conclusion, it does demonstrate that the trial had no power to identify if the vaccine was net-harmful, as it didn't have enough participants to make a meaningful conclusion about the effect of the vaccine on excess deaths).
That is what they're saying. Your individual work is placed relative to the social organisation and the interactions therein. That isn't the complete opposite, it's the same thing.

Have you ever tried working in a job where your boss just ignores you, no one cares what you do, and you're just getting paid anyway? Obviously, some people are intrinsically extremely motivated even with no contact for years, but many people, probably most, without any social organisation or interactions, will not manage to work, even if they want to.

Even just the threat of not having anything done by the next meeting is a huge part of the "social organisations and people interacting with people" that "gets work done"
Sure but he wasn’t even the best dev on the team, or even someone I would have went to for answers. He just appeared to be. The entire thing was a ruse.

Also, it’s not that he wasn’t running around. That’s actually my point. If running around and looking busy is what it took, he’d do that. Essentially he did everything he could to give the appearance of working.

Now that I’ve been in the industry for over a decade, I can say it’s a pretty common type of character. They’re usually the ones that get promoted.
> Why it matters: CMS licensing was once seen as a lucrative opportunity for publishers looking to grow revenue beyond ad dollars. But WordPress' continued dominance in the space has made it harder to compete

I used to work for such a company. The problem is that you can go to a proprietary CMS vendor for a new website and get a really good, high tech product (that's also not written in PHP), but if you want to maintain your own site, you'll have to employ a team of software engineers trained in this proprietary product, or you'll have to pay the original vendor $150/hr for developer hours for new features. There are very few contractors who know these proprietary CMSs. Most know PHP/WordPress

Lots of publishers have their own proprietary CMS, like the Washington Post which developed Arc (https://www.arcxp.com/), or the New York Times (whose CMS I don't know the name of). They can afford to keep engineers on staff, but smaller publishers can't, and would rather pay less for contractors who know WordPress or Adobe Experience Manager to add new features to their sites. Some have even moved to 100% managed solutions like webflow, which I think is a really cool product
2K? Not bad. My main linux box is running around 7500 tabs in 34 windows right now. Takes about 30s to start, which is fine since that browser gets restarted only every few weeks. My secondary desktop (windows) only has 2750 tabs.

And there are users of Firefox out there with >15000 tabs.

Two reasons for tab hoarding:
1) spatial -- related tabs are close together (frequently open a bunch of related search results; if I come back to them to continue later, they're all together).
2) history -- unlike bookmarks or history entries, tabs retain the forward and back history, so when you return to them you can know how you go there (go back to the search for example).

I do periodically clear out tabs, especially duplicates. The Tab Stats extension by glandium is very handy for tab hoarders
Copilot and the like are good for Go, because you can generate all the boilerplate code they make you write.

As for the success, it's obviously the minimal set of language features, conformance to established paradigms, not being very broken and being backed by Google.

There's a ton of suboptimal choices in Go, but overall it can work for many applications.
Thank you! Much needed feedback. Going to fix that today.
What's so bad about GitHub actions? Asking as someone who never used it (gitlab fulfills my needs).
Ah, true. I think I cross-read comments here. Sorry.
I mean, one easy way I prove it is by showing up on time to meetings because I don't have to scramble between two conference rooms. That's just to start.
> Folks got what they thought of as a bad cold.

Symptomatic Covid is simply a positive Covid test + any flu-like symptoms. What you're describing is symptomatic Covid. This is what was measured and reported in the trial.

You might say that's not very interesting because it doesn't measure anything of importance. You would be right. That is exactly what critics say before the trials.

https://www.bmj.com/content/371/bmj.m4037

The trials were never meant to test whether there would be any mortality benefit, any reduction in serious disease, any reduction in hospitalization, or any effect on infection or transmission.

What they did meausre, turned out to be inconsistent with reality, though.
It's also a side effect of the 2018 rule that US cars are required to have a live video backup camera.

If you already need to have the screen there, you might as well cram a bunch of other functions into it as well.
Homebrew 4.0.29: analytics moved from GCP to AWS influxdb
Everyone is talking specs, which might be a reason someone picks a product over another, but I'll offer another anecdote:

The last time I bought some prototyping gear, there were a half-dozen options that met my technical criteria. The option we ended up choosing was the first place to answer the phone, discuss our specific needs, and give us a delivery date.

There's a lot of good prototyping boards out there, I'd bet a lot of buyers are making decisions based on how quickly they can get back to business, rather than taking a fine-tooth comb to a spec sheet.
UK needs culture shift to become AI superpower – DeepMind co-founder
The "methodology industry-complex" thrives on consultants, authors, certification experts, courseware, etc. By definition it is funded by those who literally do not know and need/looking for something better. So while we can be honest, there is a lot of money preventing that discussion from ever happening.
Ben Forta: Data Visualization with ChatGPT
I think about flat since Labour was last in power, yes. And it is adjusted for inflation. Seems to have been no real "defunding" going on. And if it was underfunded in the first place, a 3x adjusted increase in spending must have done wonders for it, there must be significant improvements in key objective metrics since then, have there been?
AI might see it, and then AI might replicate the same code, at which point they consider it "not your code"
It's not an explicit part of your comment, but the thread where this interaction is taking place contains a suggestion much stronger than a mere "factual summary of Mozilla's legal status and ownership" (and with all conclusions then left to be drawn by the reader). Viz:

> because it's owned by Mozilla, users don't have to worry about a bait and switch at the end of the growth phase

And with regard to your words on their own, the fact that "Mozilla"* "does not require outsized returns" is a separate matter from whether it is, in practice, "less inclined to place profit above mission or user experience". History has shown—in this decade, at least—that prioritizing mission (and/)or user experience is not actually part of its current MO.

Mozilla Corporation* is a fully taxable company. It has indisputably made exactly the sorts of business deals that anyone would expect from one (and would expect not to be planned let alone executed by a purely principles-based organization). There are ordinary businesses—i.e. companies that don't even have the sort of affiliation with a non-profit parent company the way that the Mozilla-the-corporation has with the foundation—that behave more ethically and more consistent with a principles-first approach than the way that Mozcorp does things in its current incarnation and has been doing for the last 10+ years.

* it's good to be specific
This is how big orgs ALWAYS work. You have to get used to it or go back to the startup trenches.

The startup pace can be grueling, it can have terrible hours, it can be unrewarding, but at least you're always working. At big orgs with plenty of funding you just sort of marvel at how so many people can accomplish so little. Everyone is always blocked by another team or some arcane bureaucratic process. It never ends and it never gets better.

The good news is you're probably well compensated and have complete job security. The bad news is you're at heightened risk for existential crisis.
> Actors are featureless blobs that all look the same

I consider this to be mostly a positive. I'm interested in following stories rather than watching the N+1th Actor X movie.
The Global Sperm Count Decline Is a Big Business
According to my research, there's only one burner that is very expensive that works with US power levels that allows you to move in 5F degree increments and uses a thermometer for feedback.

Most of the ones you are referring to are European models that work on 240V. If you know of one that works on 120V, please point me in that direction.
Don't rely on you browsing history - Firefox will start deleting old entries without warning you if it gets big enough.
Sadly ChromiumOS still requires Google. ChromeOS to me feels like an attempt to make laptops more like smartphones. The security is there to protect what's running on your machine from you than you from bad actors.
A bunch is reasonable but I’ve seen people here on HN claim to have multiple windows with thousand of tabs on them. That is beyond comprehension for me but if it works for them that’s awesome.
Good observation.

I believe Duty and Obligation are in deep decline in the west.

Exhibit 1: Doctors being told that they can take time off from hospitals "to cope with the attack on X (x = current police brutality victim, unfortunate bystander, or neighbor dispute gone wrong)" , instead of doctors treating dying patients in ER, helping patients cope with pain in ICU, etc.

Exhibit 2: Cops failing to actively protect citizens and prevent crime (during protests, for example) because authorities have made it clear they will get sued/fired/lynched/prosecuted for doing so, and they are afraid to go against the system that pays them.

Exhibit 3: Same as (2) , but teachers in public school doing nothing to protect bullied kids

Exhibit 4: US military in forever conflicts causing an all-time low in voluntary army recruit numbers.

This is the west today. We reap what we sow.
One of the main joys of being a contractor is that this dynamic can be turned on its head. No amount of bullshit can save you from not delivering on a task you have been explicitly paid to do, and people often assume the best (rather than the worst) if you shoot for 'silent success' as a delivery mode.
For example, Mozilla compiles Firefox’s official macOS and Windows builds on Linux because cross-compilation is faster and cheaper than compiling on macOS or Windows in the cloud.
This is important to point out.

I was actually surprised by the mouthwash outcomes as well. Almost no one really talked about mouthwash, but it looked to be useful in the study.
Lack of threads is just one example of how JS is hobbled. You don't always need multi-threaded programming but there are times you do! I've also noticed that devs that understand how to do multi-threaded programming are the most proficient.

> completely ignoring the ecosystem that makes shipping projects possible in the first place.

There are so many bad js libraries out there, more than any other language I've ever seen. There's no special sauce in the JS ecosystem, there's tons of libraries available for any modern language (not Zig, I included that as it probably will get there). There's nothing you can do in JS that you can't also do in Go and the quality of the library your using is going to be much higher than whatever's on NPM.
rather than pile on the individual traits in this -- I tend to agree this is happening in America -- perhaps the constructive analysis is to notice what is missing.. that is, social context, responsibilities over time outside of personal goals, lineage and continuity, tradition, even acknowledging greater forces in life than one's self at all..

economics is part of this, but we have plenty of economic activity and yet alot of dismal outcomes.. so economics does not explain all of it
One thing to add.

Google Maps supports Satellite mode on Apple Carplay.

Apple Maps does not.

Its a personal preference thing, but thats 99% where we use maps apps in my house. My wife prefers Sat view. I dont care.
Speculation. This type of key issuance is given to FBI and NSA and other partnerships Microsoft has. China hacked their way up to get the keys.
You are not looking at a computer, because a computer is a person who computes. You are not typing on a keyboard, because keys open locks and why they be in a board.

Words change their meanings over time, the definition of democracy has expanded with the invention of representative democracy. Enough that Athens wouldn’t be considered direct democracy today because of limited franchise.

BTW, it is more accurate to call UK a parliamentary monarchy. “Constitutional monarchy” is synonym but confusing they don’t have written constitution. If democracy means direct democracy, what is the similarity in government between parliamentary and republic called? It is called representative democracy.
> “VanMoof focused on marketing and spent big, but forgot to think about supply chain and unit costs. I hear they sat on a lot of faulty stock and over-ordered after the Covid delays.”
Famously Netflix involved no venture capital; and Disney and Sony, no financial engineering.
I was assuming this was a Europe thing. It seems as if they don’t have correct and complete data of the closed entries and exits. The closure itself was on the map, but the algorithm still failed to plan an appropriate detour. I have had multiple times where I was routed to closed entries over and over to the point where I’d have to park the car and ask a local for directions.

Always tried both apps in those cases and they both didn’t seem to get it.
is there no Uber in Amsterdam?
Yeah, Google Analytics pioneered "JS and tracking cookies is all anyone needs for analytics" in ancient times and most other analytics companies followed that leader. It's the rare HN post indeed to see someone actually using classic web server logs in 2023 for analytics instead of JS+cookie trackers.
the article is saying that the business models exhibited by some companies are unsustainable, and exist only to diminish competition in the market (which is a net loss for consumers)

in other words, it's descriptivism, not prescriptivism. Do you agree with that description presented by the article?