skysight-inc/HackerNews huggingface dataset:
> TPMs are a red herring here though, as the TKey is not a plausible replacement for a TPM, which exists to measure a platform boot process. There's not really any way to use a TKey for this, since a) you'd have to load firmware at every boot before the first measurement is taken (i.e., before the BIOS even starts running), which no PC is setup to do, b) you would still be vulnerable to classical MitM of the device, as for any discrete TPM, and unlike modern functional TPMs.

Well, yes, the TKey specifically is missing bits and pieces that makes it unsuitable as an actual TPM on current computers. We could however add them in. We wouldn't have to load the firmware at boot time for instance if like you suggest in your article it is stored in a flash chip and automatically loaded by the discrete HSM itself at boot time. We still need the option to reload new firmware from another source or change the flashed firmware for maximum flexibility, but at least this problem could be solved.

The other point about discrete TPMs being vulnerable to MitM attacks… yeah, I haven't found a way around that. As far as I know, I don't see a way around executing one bootloader on the PC, and have the TPM measure another bootloader (say the one approved by Intel and Microsoft). My web searches around that are eerily silent, and the best technical explanations I could glean tend to show that measured boot and discrete TPMs are fundamentally incompatible.
Micro services don’t solve any of those either.
> Qui bono?

It’s „cui bono“ because it’s using dative case i.e. „whom is the favor“.

Declination of the Latin relative pronoun „qui“ is the following for the masculine genus:

qui

cuius

cui

quem

quo

Sorry for being a grammar nazi.
I will Forever be grateful and give credits to this professional Hacker Captain WebGenesis. This Specialized Crypto Expert was able to retrieve my bitcoin worth over $430k in my Trust Bitcoin Wallet after I lost my wallet's password and had tried all the means including paying fake Recovery experts lot's sum of funds. I Learned about Captain WebGenesis through one of my work's colleague who had worked with the Expert recently to recover her stolen investment with a false binary investment company. His responses and services are highly reliable and recommendable. For any hacking services you can consult the Expert through;
Whatsapp +1 (447) 442-0456.
email Captainwebgenesis@hackermail.com
They're different. Very different.

Think hard and ask yourself why these two cases are different in the eyes of STEM practitioners.

A good starting point is the LK99 observations and claims.

Were these made by the same team or two very different teams?

Were thousands of examples provided in the public domain, or were the LK99 claims based on a limited number of closed experiments.
Why would they not just adapt the code generator for the reference compiler? Rust is a moving target, committing to a new compiler at this point is a massive investment.
(2) is perhaps poorly and ambiguously worded on my part. What I meant to convey was: "It's rude/impolite to refuse your friend's offer to top your drink up" (context being: you're already out drinking).
> which means the touted openness advantage could easily be lost

RISC-V openness has nothing to do with processor implementation, it's solely in the instruction set.

The advantage it has is that it provides compatibility across vendors and anyone can become a vendor of RISC-V IP. Comercial IP doesn't affect that, and if anything makes multiple IP vendors more likely.

The availability of server processors depends on the market rather than any technical limitation. If someone decides to take the risk of investing in the development of a strong server product then we'll get it. It depends on some company believing there is a market for it.
> These days it’s more and more common to completely ignore the windows installer system and install per-user to app data, which has the benefit of allowing a better self-updating experience without elevated permissions, and lower risk of pollution of system files.

On the flip side, this is a nightmare to manage as sysadmins, who try to maintain a tight ship using AppLocker polices. So many apps these days have a standard installer, but then they download an update and try to run the newer version from AppData, and of course, it gets blocked and we get calls from angry users saying that their app no longer works. Of course, we could whitelist the digitally-signed executable, but some apps aren't even digitally signed (or only partially signed), sometimes the digital signature changes completely... it's a mess.

Then there's the problem of dumping large binaries and entire applications into the AppData folders, which bloats up user profiles. This can be a bit of an issue with certain roaming profile systems like Citrix User Profile Manager, which by default works in a blacklist mode (ie, you have to explicitly blacklist paths that you don't want to roam). If you don't stay on top of this and add new AppData subfolders to the exclusion list, then you'll find all your large Chrome updates or whatever (with several versioned folders) all syncing back up to the profile server, wasting space, bandwidth, and increasing logon, backup, and AV Scan times. In a large organization with several thousands of users, this is a disaster waiting to happen.

Also, using AppData to store entire apps is just plan wrong - that's NOT what it was meant for. AppData was meant for storing app data, and the apps themselves are supposed to be stored in Program Files.

These self-updating apps are the worst thing that could ever happen in a corporate environment.
Actually we don't have to make it simple.

We just fine them like crazy if they fail.

AND make sure the company has no waiver against passenger lawsuits.

Then you just let the market decide - get it right or go bankrupt.
To make things even worse. There is 祂 specifically for god-like characters (for example jesus). And 牠 for animals.
Their names are literally the school name now. So, that's probably strike 1 if I had to guess.
Contracting work happening outside US territory by non-US citizens is not taxed in US.

From a US company perspective, you can do your work as an individual or a local registered business entity: you agree to gross terms, and that's what you get, and they have that as an expense.

However, many European countries require you to incorporate (at least a Ltd company) to gain proper "employment" and stop people from using contractor relationship as a tax loophole.

Depending on your country of residence, your tax rates will differ.

Estonia has started to offer completely digital companies, but I am unsure how that fits inwith your goals or legal requirements.
You should read about Proyect Lyra. https://en.m.wikipedia.org/wiki/Project_Lyra
Ah, the ultimate fascist wet fantasy. Thankfully he’s gonna rot in a Georgia state prison, likely for treason
Thank you, that really helps. Too many abandonware languages already. If you are close to retirement it might be a good idea to get a governance structure in place that survives your retirement. That way the language isn't tied to you personally.
Can someone explain why WinRar installers of the same exact versions and languages but downloaded from their different sites www.rarlab.com vs www.win-rar.com have different sizes/hashes while being signed by the same signer?
Is there anything for binding Moonbit code to JavaScript, like Emscripten's Embind?

https://emscripten.org/docs/porting/connecting_cpp_and_javas...

What do you think of that approach?

Will things change as WebAssembly evolves?
Part of me wishes there was a law that companies had to implement checks that their customers read and understood the agreement. Timers, making sure people had each line of text on the screen for a sufficient amount of time, and line by line video explainers. Just to expose the ridiculousness of it all.
Amusingly Taiwan is why PRC and USSR fell out.

When America evacuated the nationalists and placed their Pacific fleet in front of Taiwan Mao asked the Russians for help. He could defeat anyone on land but he didn't have a navy to get his troops across.
The Russians politely declined because it wasn't worth the risk of WW3 for them.
It used to be that the government protected its citizens. Laws were written to force companies to make disclosures, certain contracts had to be in writing, some documents require notaries, even fair credit reporting standards allowed citizens to see the data banks kept and shared about us.

We used to be safe because the government protected us.

Now you can consent to be spied on for an eternity because you clicked "ok" once.

You have no recourse to do anything with the data SV keeps on you and our government simply doesn't care. As long as SV plays nice with government demands to curtail 1st and 4th amendment protections there will be lax regulation.
It is an absense - where does it say that people are allowed to use the tools and what are they allowed to do with it. If no license then you can"t use it.
Paywalled, but I recently listened to one of the vegan doctors (I think it was McDougall) talking about these. It’s pretty crazy stuff.

Also, as an aside, it’s amazing to me the lengths to which people will go simply to avoid changing their habits.

My endocrinologist has plant-based diet material all over her office. She tells her patients that she’d be out of a job if everyone would eat a healthy (McDougall, Gregor, etc) plant-based diet. Almost none of her patients follow her dietary advice.
But then Kernigan contributed to awk which does regexes, count lines, and enough other things that there are 500 page books on how to use the tool. Maybe stringing together grep and wc wasn’t always enough.
ChatGPT finds a role playing Dungeons and Dragons
The chapter is from:

Kenneth Compton, "Image Performance in CRT Displays", SPIE Tutorial Texts in Optical Engineering Vol. TT54
The problem is not the funding (Google is not poor) or the lack of talent. All big organizations struggle with the problem of allocating what they have effectively. It all gets bottlenecked in the organizational hierarchy. Politics and a lot of non technical people end up on the critical path to any decision making.

That problem is not unique to Google. The bigger the company, the bigger this problem is. Big corporations are primarily concerned with keeping share holders happy. Share holders by and large are not very technical. Nor are most executives. And there are several layers of management in between them and the people actually coming up with new stuff. Communicating anything technical and the sense of urgency about doing something with that information to those people is very hard.

For any meaningful budget to be allocated to some new and exciting but unproven thing, a lot of very busy people in that org tree need to be in agreement that that's a good thing before anything happens. That happening is just not very likely. It's literally easier to get investment outside corporate hierarchies. That's why startups are a thing. Google files lots of patents that they will probably never do anything with. And that's just the ideas they've had that get patented. Most of what Googlers come up with never gets actioned in any way.

In this case what happened is that a bunch of smart Googlers invented something, wrote a paper about that, and then some external people read that paper and got inspired. Multiple startups got busy working on those ideas and Google ended up sleeping through the whole AI revolution until belatedly realizing they needed to get their shit together. Probably around the same time their shareholders noticed that something was up. Now they are in catch up mode. And they'll probably pull a thing or two together. But the point is they are reacting to the outside world and not acting on their own insights or inventions. They are one of many big companies that now know AI is a thing.

They'll likely miss the next big thing as well for the same reasons. Even if they invent it.
Unless OP incorporates in the US there shouldn't be any double-taxation.
go is such an ugly language. smh
We're in really horrible territory and it's getting worse.

c.f. the whole "video calls to train their AI at Zoom" (later: "unless you opt out", sorta) pullava ...
Lucky for me Radio Shack inexplicably decided to use it in their Color Computer (I had a side job working in their stores so I had access to it) and when I started working full time for a bank a security guard there sold me his 'Dragon 32' micro which was a 1:1 clone of the CoCo. For the time this was a very interesting machine that used software where other computers used hardware, for instance, for audio in and out. The hardware was a bunch of resistors and a comparator (yay binary search) and replaced a whole bunch of costly ICs. I guess that's how they managed to keep the price of the machine down.
Unfortunately, the "Rapid Application Development" thing also seems to apply to the library itself: you get a new release every other week, and stuff breaks in somewhat unpredictable places. So it's easy to prototype something with Textual, but hard to maintain it afterwards.
It is interesting that in the linked document exercises 4 and 10 ask you to implement addition for those kinds of numerals. Can you think of a way doing this without checking for zero? (I know that sometimes there are unsolvable exercises in the literature, but the author gives this routinely as an assignment it seems [1].)

[1] http://wcl.cs.rpi.edu/pdcs/slides/Chapter2-LambdaCalculus.pp...
3-4 hours right now, but there is about 20% battery wear and I've not setup TLP yet.
Typical? In what sense?
What about fish and eggs? Those are some very nutritious foods.
Many Nintendo fans are adults.
> Will things change as WebAssembly evolves?

Yes, but we also plan to support old Wasm versions, like 1.0 etc.

Note Moonbit is designed in a modular way that it should be easy to
target different backends (JS, Native). Currently we are focused on make the
Wasm experience optimal(including the debugger)
Drone Scans Reveal New Details About the Battle of the Bulge
These are most likely not legally binding in the UK as consumer contracts and notices as a whole have to be fair (transparent, in good faith and intelligible) to consumers under the Consumer Rights Act 2015.
Billions in sales in an economy of $400B per year is affecting the economy?

I would assume that things like energy costs would have a far bigger impact.
Thailand repealed the old laws without putting any new ones in place, hence the no-holds-barred overnight explosion.

It's a matter of time until they clamp down, although given the perennial machinations of Thai politics, which are even worse than usual right now due to the military junta vs election winner squabble, how long it takes and how strict the new laws will be remain a mystery.
I feel the same way... happy and sad at the same time. Great music!
We're talking about nSv/h here. Even a ten-fold increase is still negligible and even less what you would measure in some regions of the world from natural background radiation in places like Ramsar in Iran.
If that was the question, how it comes that 33% answered one of

From documentary films

From social media and the Internet

From fictional films/ TV shows

From books

Already books, films, social media and the internet on the very first day of the accident? Fiction, maybe.
The closest security generally gets to "quantitative" techniques is in applying risk management to threat models.

But the way risk is managed in the industry (multiplying likelihood and impact) is completely incoherent and voodoo. See the book "How to Measure Anything in Cybersecurity Risk" [1] for a good explanation of why it doesn't work and better ways to do it.

Which is a long way of saying, no, security doesn't use quantitative techniques mostly, but it would be possible if people understood how to measure and manage risk properly.

[1] https://onlinelibrary.wiley.com/doi/book/10.1002/97811198923...
Switzerland's new data protection law comes into effect on September 1st. Not sure it would require everyone in the world to get a new ToS unless one ToS is for the whole world.
Will the compiler be open sourced?
This sounds like a “the one secret doctors don’t want you to know” ad
Quite. Systemd-resolved breaks dns a lot by default, leaves a pasty taste in my mouth.

The systemd-timesyncd also causes undesirable behaviour

This shouldn’t affect systemd-initd except it does because of the name.
> to be later messed up with business changes because the original (business) idea didn't work

If the point of a project was to run a business, I would argue the project was messed up from the start if it could not adapt to the changes. Very little software survives contact with the real world.
Very true. This is one thing I like about Go. The standard library is very complete. I can do most things I need to do without having to pull in any external dependencies.
MSIs are so bloated and horribly designed, it isn't even funny. Why does it insist on storing a copy of the entire .msi - and any patches - in C:\Windows\Installer? From what I've observed, the original MSI is required to perform repairs and reconfiguration, or setting up new-user defaults for that app. This seems horribly inefficient to me, and on heavily used system this can easily waste space on the C: drive.

And occasionally you run into issues with the MSI database corrupting, where you can't install/upgrade/uninstall something (we see this commonly with Adobe apps) , so you'd need to resort to third-party tools like MSI Zapper to get rid of all the references from the database. What a messy system.

I miss the days when programs used to use NSIS (Nullsoft) installers - they were tiny, and super easy to make and automate.
Weirdly enough, I did, last week.

So there you go...
Not to be that guy, but you're foolish if you think a person who gets secret service protection, forever, will ever see the inside of a prison.

What are they going to do? Empty an entire cell block just for one guy?

If (and that's a BIG if) he's ever sentenced to anything, it will be like gps monitoring at most. Again, that's IF he sentenced to anything.

I have no faith the US justice system will be able to convict him, as a side note. He's just too famous to have real consequences; that's how we do.

Edit: these statements are not to be seen as pro-trump in an fashion. They are just common sense.
What does this mean for customers of Meta, Microsoft, and PayPal? Are we consenting to having our data more carefully handled?
So what is a good take?
If I understood correctly, Pilate lived during the empire, a few centuries after the system described in the blog post (middle republic).
> The larger tech companies all have a presence in the EU, could you not contract with those?

my experience so far was working with small to medium sized businesses and this is where I felt the most comfortable. no experience with big tech, not even sure if they would want to employ me, probably not.
Because accepting it would make them feel bad about having done so many experiments in a cruel way.
I wish that linux installs were more self contained though. Directly dumping everything into a global folder is a bit messy and you can only ever have one version of a shared library installed unless each version is uniquely named (a problem which Windows 3.1 also had).

I wish that packages got their own folders as standard, contained all the required libraries and had unique "internal" names like java packages to avoid conflicts. Very much like what Android and Nix do.

It's a bit of a pain for the package makers and some may call it bloat but there's less chance of non-main-repo programs forcing you to connect to their own repo and potentially creating a franken distro if it's not been updated (or has been updated too far!)
Proton Mail is open source, anybody can review the code to see that that clearly is not the case.
Maybe this is semantic…but I can’t imagine the super wealthy scrolling through James Edition the same way we search on Amazon and then scroll through a bunch of flea market crap and intentionally off-base ads to find what we want. Instead, wouldn’t a super-rich person tell her assistant, “I want a yacht,” and then the assistant would sift through the crap and contact other assistants as a result. And as a result the assistant might tell his boss “well, looks like a good yacht costs $xx million,” and the boss says “oh that’s more than I thought, and then I have to take care of a stupid yacht, forget it, hey book me a luxury cruise, my friend had a good one.”
Been there, it works, but if the original crt board has issues (and you’re not good at diagnosing them) it would be great to get a good quality replacement
ASML is concentrated in a country that has been politically stable and uncontested for 80 years and doesn't seek the media spotlight.
It is easy to overlook. Nobody really pays much attention to the Netherlands or it's non existing foreign ambitions and there is no state involvement in ASML.
Basically no drama means no journalism.
I find that extremely doubtful (I mean something like that might have been used in propaganda material of course but nobody could have seriously considered that to be a realistic threat).

The position the 13 colonies and the parts of India (that were under control/influence of the EIC) were in could had hardly been more different.

Also this possibly somewhat anachronistic because the level of control the East India Company had over India back in the 70s was quite limited and relatively indirect.
Reminds me a bit of the Covid-Vaccine from Biontech. The small (220K inhabitants) City of Mainz was able to pay all it's debts within one year just due to the Taxes paid by them. And it shifted the state of Rheinland-Pfalz from receiver to giver ob subsidies to other states.
Charge Cars
Who mentioned outsourcing?
Which cities would you recommend then?
> From a US company perspective, you can do your work as an individual or a local registered business entity: you agree to gross terms, and that's what you get, and they have that as an expense.

this seems the most sensible

> However, many European countries require you to incorporate (at least a Ltd company) to gain proper "employment" and stop people from using contractor relationship as a tax loophole.

I'm aware of UK's or Germany's regulation in this regard, the contracts have to be limited in duration and contracting for one customer for more than 1 year or so is prohibited, is this what you mean? Otherwise I'm not sure what the loophole would be, it's standard b2b relationship in my eyes...
Same in Germany. There was an interesting case against WhatsApp banning a user for using a third-party app, which WhatsApp argued was against the ToS but the court ruled that the user could not have expected this to result in account termination as using third-party clients was perfectly acceptable practice for similar apps and the user was not explicitly warned this would happen.

Basically you can't sneak gotchas into a ToS, you have to make sure users know they're violating a rule. Ironically this is unlike actual laws where ignorance is not an excuse even if the law is weird and unexpected.
Those games stopped receiving updates years ago.
Sydney the Bing bot also reacts exactly like it's feeling offence. Is it also obvious it's feeling offence?
When I took a TV servicing class in high school in the 1970s we were told just to keep our left hands in our back pockets so the discharge will ground through our right side and not across our hearts. The biggest hazard was breaking our hand on the chassis as we jerked back from the shock.

I never heard of any kids getting hurt, so it was fine.
I'm betting the shop on 68k.24xlarge