skysight-inc/HackerNews huggingface dataset:
I agree with your questions to be asked if an attack succeeds but...

> ufw/iptables/nftables won't stop local binaries from opening outbound connections

Wait... Of course iptables/nftables can be used to prevent anything local from opening outbound connections. You can, say, easily have a firewall which only allows "NEW" traffic to be inbound traffic on either port 22 or 443.

They're called stateful firewalls for a reason.

For example on Debian you could configure the firewall so that the only user allowed to emit new traffic to get updates is the (/nonexistent:/user/sbin/nologin) user "_apt".

And for all those (not you) talking about the "cattle vs pet" thing, all this can be automated by hardening scripts you run exactly once, once you set up the server.

It's not because there are guides out there that every step in these guides have to be done manually, each time you configure a new server.
I think this was wry humor.
I expect FAANG will try to normalize putting cameras in rooms to observe how screens are being used, and enforce a "no cameras pointing at screens" rule with their own cameras.
Similar ideas have been stress-tested in the last couple years: eye-tracking in the context of remote academic exams, some work-from-home contracts, some competitive e-sports. Basically, environment integrity: a "trusted", "secure" physical environment — beyond just the software environment – as a mandatory prerequisite for $webThing.
Excellent change in perspective from all the legacy endpoint focussed techniques.

Working in SaaS we’ve got some, but not all, of these in our risk lists. Time to do more brainstorming. Thanks for the inspiration.
I am sorry, the sentence with the "buy shopping" does not make sense to me. I completely understand this arrangement, I grew up in the USSR, where people had been carrying a net bag in their pocket (advised several times in this thread), calling it "what-if" bag ("авоська") and just going to the store every day and getting whatever was sold there, thinking the idea to plan to buy the exact things you need is ridiculous.
It would be just as reasonable if it was a smaller money-losing corporation.
> True anonymity is not illegal.

I'll use the exact same kind of argument to make the opposite point:

Facebook answering a legal subpoena isn't illegal.

> To be anonymous don’t reveal your identity to anyone on line.

They are not anonymous from Facebook perspective.

There is no "right to anonymity" on Facebook, no more than there is a "right to free speech", the user accepted all the TOS when they signed up. Even the GDPR doesn't grant any right to "anonymity", however the platform cannot use identifiable data however they like, but you bet legal data subpoenas are not covered by the GDPR.
0.5003% of the maximum velocity of a sheep in a vacuum (1)

(1) https://www.theregister.com/Design/page/reg-standards-conver...
One man and his drone: ‘My hope is to shut down the coal industry’
> What we do is fairly easy, the whole "value" is in some fairly simple prompt on top of openAI APIs.

We are seem a lot of these apps nowadays. People come up with a prompt, send to OpenAI with the user data, hide it behind a certain web interface and it's an app they can charge for.

I've thought about this a million times for scratching my own itches but I just talk to ChatGPT and it's fine.
The other alternative is 'security through complexity', and serve everything as a wasm 'executable'. Flutter seems like an early experiment in that direction, if you try to examine it's inscrutable html.
yea, basically added small streams to main river so fishies can escape.
"conflates" - confuses socialism and communism. Socialism, when done well, is an enormous force for good, for example the NHS. I cannot understand how people can be against socialism when the benefits clearly outweighs the downsides.
Are they more complicated? The Linux kernel, maybe, although I'd like to see a citation for this because I'm not 100% convinced. Debian? No way. Maybe Debian and all the packages that make up a default install, but most of that isn't Debian so I don't think that's an apples to apples comparison.
You need to be very naive technologically to believe it is trivial to have an “anonymous” Facebook account.
This probably it is only possible if you use a burner phone bought cash without a SIM card and use exclusively public WiFi hotspots.
I'm amazed there was as much detail as there was. How do they know how far off the antenna is?
There are many networks in many European countries that do not require any form of activation to use their SIMs.
In Spring, man built a tower.
In Summer, another.
Through Autumn, they held,
but in Winter, one fell.
Let's just hope it doesn't make it to the machine planet.
I had a Pentium 4 and it was purchased with 512MB of RAM, so I don't have to imagine it with less than 1GB. I was living the adventure.
What system isn't capable of rewarding bad actors for a long time?
I've never used it because the (unknown) effort of switching and the chance of compatibility issues have always made it unappealing compared to just switching to a faster language.

If I could just `pip3 install pypy` and then set an environment variable to use it or something like that then I'd give it a try. It does feel a bit like adding a jet pack to a rowing boat though. I know some people use Python in situations where the performance requirement isn't "I literally don't care" but surely not very many?

Obviously if it was the default that would be fantastic.
Not so far fetched - Clouflare browser isolation [1] seems to be pretty close. Instead of parsing and executing the websites on local computer, they host a remote Chromium instance. The page is rasterized and send to local browser as sequence of Skia[2] Draw commands.

(Disclaimer: just did the research 1 minute ago).

[1] https://blog.cloudflare.com/cloudflare-and-remote-browser-is...
[2] https://skia.org/
Lol the wikipedia article of RFs is literally quoted to be "Part of a series on Machine learning and data mining" yet you have MLDevSecBullshitOPs-type experts here schooling you on what consists AI or not.

https://en.wikipedia.org/wiki/Random_forest
Is this comment serious?
Regardless of whether it's designed to shorten the game, it lengthens it significantly. Monopoly only ends when enough money leaves the economy. With the free parking lottery a LOT less money leaves the economy, leading to extended play time.
It's the worst software I've ever used, but it does open links in default browser - Firefox in my case, without any issues.
> “Meta argued that Facebook users should be able to express criticism, even if it is severe and anonymous.”

It’s interesting to see Meta taking the opposite stance in this argument when they’ve been so instrumental about suppressing criticism deemed misinformation by the CISA, DOJ, FBI, NIAID, CDC, etc…
> The carbon footprint of an astronaut going into space on eg a Falcon 9 is on the order of that of a couple average American families for a year.

You certainly mean the direct carbon footprint, right? Not counting what was involved in building the rocket, importing the material, test launches while developing the technology, etc?

> It's not a huge impact compared to how much they advance our understanding of how to live in space

Not sure I get that comparison. So you say "it's okay to contribute destroying life conditions on Earth in this case, given how much it helps us understand how to make people survive around Earth"? We can't move the Earth population to live in orbit once surviving on the ground is impossible, so it's a bit like saying "the carbon footprint of burning tires is not huge compared to how practical it is as a way to get rid of tires", IMO.

We won't, as a species, go live in orbit, we won't go live on the Moon, and we won't go live on March. And we quite certainly will not ever reach the next star (which is what, 4 light-years away?). We don't need to understand how to live in space in order to survive on Earth. And right now we are destroying Earth. We need to first learn how to survive on Earth, and then maybe we can consider playing with human spaceflights again.

> I haven't run the numbers on Starship, but my impression is that it'll be significantly more efficient.

Again, you're missing all the indirect impact, and then all the rebound effects. Every success of SpaceX gets us into a world where the space business (because it is now a business) emits more CO2. I don't know why people don't get the memo, but right now our survival depends on reducing our CO2 emissions, not increasing them.
Prediction markets got Donald Trump wrong on the election night and Brexit too[0].

Given such a huge failure why should we care what they say?

[0]: https://archive.li/7m8s6
So no posts by whistleblowers or dissidents, no discussion between non-heterosexual or non-believing people in certain countries, and so on.
For context Mighty was a browser running in the cloud, vnc style, giving the user more bandwidth and cpu power. It was started by Suhail the founder of Mixpanel, however he wound it down last year and the team pivoted to generative AI.

Suhails postmortem: https://twitter.com/suhail/status/1591813110230568963

The OP immediately made me think of Mighty.
Little Pleasures in My Life
I'm assuming you mean 'We' as the US. Assuming everyone holds high standards may be a mistake.
I don't think Brave are doing substantial Chromium development. They turn off a bunch of features, in their fork, but I don't think many changes are flowing back upstream, they're mostly focused on the Browser UX layer than the Engine layer, much like Arc, and arguably Edge (although I think Edge does contribute some back).
Shenzhen IO is also really good, and probably the most similar to TIS 100
It's not even just downstream vendors. Google itself only supports its devices for three years. I bought a Pixel 4a on release in 2020 and next month will be my last security update.

https://support.google.com/nexus/answer/4457705

Can you imagine if Apple or Microsoft stopped making OS updates for CPUs more than three years old?
Today, McDonald's, of all places, is actually the best place to get free wifi that's actually fast. They're quite committed to the goal of wifi in every locale and obviously they're everywhere

Additionally, certain grocery stores like Sprouts will often place the employee break area in the front of the store so customers can also hang out. There's outlets, a microwave, and free wifi. You'll sometimes have to ignore an annoying TV playing the same 4 commercials on a loop
Second this - no psycopg2 support and to a lesser extent lxml is a nonstarter and makes it pretty difficult to experiment with on production code bases. I could see a lot of adoption from Django deployments otherwise.
we’ve destroyed much of their habitats
One could say the same thing about your previous post, falsely claiming the person you replied to felt “entitled to someone’s labor,” when they said no such thing.
While that does sometimes happen, I find the risk to be overstated. Most simple "allocate a large, complex data structure (e.g. dict of vectors of dataclasses) before creating a multiprocessing.Pool/Process/concurrent.futures.ProcessPoolExecutor and then refer to parts of it in the executor's jobs" work that deals in GBs of data does not suffer from copy-on-write-induced OOM issues in my experience. If the data in the shared memory isn't mutated in python, the refcount mutations are rarely enough to dirty more than a fraction of a percent of pages (though there are pathological allocation/reference schemes where that's not true).

If you do have memory issues, calling 'gc.freeze()' right before creating your multiprocessing.Pool/Process/concurrent.futures.ProcessPoolExecutor is sufficient to mitigate refcount-related page dirtying in the vast majority of cases. In the small remaining minority of cases, 'gc.disable()' as suggested by the freeze docs[1] may help. If that still doesn't do it, or if your page-dirtying is due to actual mutations of data (not just refcounts), it may be time to reach for actual shared memory instead[2][3].

1. https://docs.python.org/3/library/gc.html#gc.freeze
2. https://docs.python.org/3/library/multiprocessing.html#share...
3. https://docs.python.org/3/library/multiprocessing.shared_mem...
It would be true if leaving probability were uncorrelated but in reality they are correlated so it's not such a big improvement than people usually expect.
> chrome development

I might be ignorant here, but what development? Wasn't Chrome a done product years ago? It seems to me that the powers that be just keep on stuffing more and more nonsense into it for the sole purpose of making it harder, nay impossible, for anyone to compete.
I work in a small company, but I've found that when I'm uncomfortable supporting one of the companies values to my direct reports that is powerful fuel to push the c-suite to change things. Of course, it took a lot of building trust to get there, and it is important to have some core of truly shared values, but I've found that work has payed off.
Daily Doodle Club
> […] most of the money supply creation directly lead to stock price inflation and largely lead to a huge bubble in the stock market (that is largely still there) where basic fundamentals of a company did not matter to the stock prices.

You claim that the bubble was caused by the money supply (e.g. QE†), but bubbles have existed even with fixed money supply, so what evidence can you provide actually showing the causal link?

We now have monetary headwinds (e.g., rising rates) and while there was a correction / bear market (≥20% drop in 2022), the headwinds have continue while the market has recovered.

† Which, BTW, is is not really adding new assets, but is rather an asset swap:

* https://www.pragcap.com/the-exploding-u-s-money-supply-myth/
Yea, the construction and trades industry has a lot of toxic employers, you know, middle aged or older "manly man" syndrome individuals.

They are shocked that younger people don't want to join the trades and experience shit pay and daily hazing until they become a real tradesman.

There are good employers out there but they are far and few between. Union jobs are also decentish but also not common outside a few places.
"Don't show this again" is a thing of the past it seems. I installed Windows 11 fresh on a new machine not long ago and after refusing all the sign-ins and cloud this or that when installing, I log in and am greeted with "let's finish setting up Windows": a window full of all the OneDrive and other features I already declined and whose only options are "continue" and "remind me tomorrow".

And then, after finally figuring out the option buried deep in Windows settings to disable that window every time I turn the computer on, I subsequently discovered it had apparently ignored all my requests to not set up OneDrive and was syncing all my user folders to the cloud anyhow.
In what way would the people in the prediction markets fund a replication? That's not something that normal people just do. And if I wanted to do that, I don't even know how.

And society doesn't spend money. People do.
Tom Baker used to be the voice used on British Telecom for a time.

Imagine accidentally sending a text to the wrong number and getting a dirty phone call from Dr. Who at 2 in the morning...
By taking a cut in wages
you are not wrong. they can be very destructive. it is why most places keep an eye on them but mostly try to leave them alone. if they get near something like a road and flood it out they get captured and moved.

there are other parts of the US where they are basically extinct. we have literally decimated the beaver population in the US and Canada and are just starting to understand what that means. so some of those places are moving them back in to good effect. those areas have turned into basically deserts. there are no roads are farming near them because the beavers are no longer replenishing the aquifers and those guys left long ago. the fish are long gone because the rivers run dry every year now. once they put them back the fish return the banks start to grow with new growth and the rivers do not run dry every year. the best things that beavers do is what is called water linger. letting the water soak in and help the surrounding area.

in other areas like where you are from they are considered a nuisance because you have enough of them to fill the area up which is your point.

the downside to these sorts of conversations is everyone wants to do 'that one ting' but to properly fix these sorts of things is not planting some trees or dropping a beaver in. you have to have an ecosystem around them that supports that sort of thing. all the way up from the rocks, dirt, microbes, moss, bugs, small animals (birds and rodents), grasses, trees, and larger animals like beavers or foxes or bears. pluck one of those things out and the whole system hurts as there becomes an imbalance and stuff will die out or like you point out overrun the rest of the area. if your area is overrun with something there is probably some sort of imbalance.
Let me try:

We hold that humans are special and have superior capabilities beyond current scientific understanding. This means that words like "intelligence" don't have a precise meaning and tend to mean just "something beyond what technology has achieved so far".

This leads to constant over-promising and under-delivery. We promise that computers will be smart now, honest, but all that happens is that tech improves, still doesn't quite do what we want, and the goal moves further away.
> Subpoenas are not a legal instrument in Europe. Europe also uses civil law, not common law, so there's no criminal, civil divide like there is in the US.

There absolutely is in many European countries. The divide is just along different lines than in US.

https://www-librededroit-fr.translate.goog/quelle-est-la-dif...
https://archive.is/TDV3T
Watching his mit lectures is edifying. He loves Bitcoin and thinks all ICO are scams. Of course most ICO are scams but not all…
In this article I am going to show how to build a simple service which monitors our HackerNews account and sends a notification to our Discord channel when there are new comments to our submissions.
CRTs were never impossible to film - you just had to put in some effort to adjust shutter settings on the camera.

I can’t imagine there existing a technique for emitting photons perceptible to the human eye and yet it not being possible for a camera to capture them.
I have a better idea, measure how good you are at turnover. How negative is it when someone leaves? How easy is it for someone to join and be productive?

Well, specifically, you can measure onboarding, which is a proxy:

How quickly can someone get started on a feature and ship it to production? How obvious is it for them to follow your teams procedures, guardrails, tests, review processes, etc and go?

Maximizing this means maximizing the available colleagues that can work on your codebase and sets up a positive culture of enablement. It means maintaining your code is not an inscrutable mess.
I use it for data transformation, cleanup and enrichment. (TXT, CSV, Json, XML, database) to (TXT, CSV, JSON, XML, database).

Speed up of 30x - 40x. The highest speedup on those that require logic in the transformation. (lot of function calls, numerical operations and dictionary lookups).
Is not Flutter on the web was just canvas? I am genuinely asking, I dont know if this has changed or is incorrect.
My (imperfect) understanding is that this is because of how end-to-end encryption works: you not only need to receive the messages (which are stored on the server, so you don't have to worry about them as you can retrieve them when you want), but also the keys to decrypt these messages (which are only stored on the clients, so whether or not they are available depends on you).

Possibly, one of your clients has the keys needed to decrypt one of the messages, but you're using another client which doesn't. Things go back to normal when both are connected at the same time and can share the keys, or when the client of the sender is connected and still has the keys.

If you don't keep your clients connected all the time, you can use a secure backup on the server, so the clients can retrieve the encrypted keys from the server and decrypt them locally.

Not having the keys happens more often if one the parties uses short-lived sessions (like logging exclusively in a private browser window, for example).

This article helped me with understanding a little: https://gerstner.it/2021/02/matrix-and-e2e-encryption-or-how...
Someone replied to me on a different discussion of this topic with a very astute point, paraphrasing:

9 out of 10 people seem to prefer to catch and punish a pedo than pay higher taxes to fund actual child and family support services that actually, actively protect children from violence, hunger, drug abuse, and, depressingly, all the rest of the shit that gathers at the bottom end of humanity.

Maybe not 9 out of 10, but I'd guess at least a majority, which is still a fucking sad state of affairs.

On the other hand though, that could just be because actual, active child protection doesn't enter into political discussion of internet surveillance. So that's what we need to inject into the conversation to make "then" understand that there are more angles to view this from.
Yes, it's published by MicroProse, but it's really the labor of a single person who started it as a hobby.
vscode recommends plugins to install as it encounters file types they would be appropriate for. It's not strictly out of the box, but it's fairly close to out of the box... Out of the box, vscode comes configured to guide the developer to enhance it as needed.
Look at the SPACE framework, its meant as a super() to DORA that is focused on developer productivity vs. systems performance: https://queue.acm.org/detail.cfm?id=3454124
Right, but this was new in the last 48 hours or so I think.
I put PyPy in production at a previous job, running a pretty high traffic Flask web app. It was quick and pretty straightforward to integrate, and sped up our request timings significantly. Wound up saving us money because server load went down to process the same volume of requests, so we were able to spin down some instances.

Haven’t used it in a bit mostly because I’ve been working on projects that haven’t had the same bottleneck, or that rely on incompatible extensions.

Thank you for your work on the project!
UK announces approval of 100 new oil and gas fields
They've bumped it up to 5 years for Pixel 6 and later https://support.google.com/pixelphone/answer/4457705#zippy=%...
On Technologies and Trust
Compares using Chat GPT to learn writing in college with using Hello Fresh in culinary school
And conversely every release of Java brings it closer to becoming Python.

With Java 4 we got regular expressions.

With Java 5 we got varargs, string formatting, boxed numbers, syntax for looping over collections and imports of static methods.

With Java 7 we got Timsort, the sorting algorithm from Python.

With Java 8 we got first-class functions.

With Java 9 we got a REPL.

With Java 11 we got implicit compilation of source files so you can run them directly.

In more recent releases, we have previews of features corresponding to f-strings and ctypes.
A jargon-free explanation of how AI large language models work
> Monopoly only ends when enough money leaves the economy.

Not true. Monopoly ends when one player can take money from others faster than they can accumulate it. There can still be net money into the players, just not net money in to most of the players.
Thank you - on reflection, I could have been more clear, but I’m glad at least one person got what I was trying to say.