skysight-inc/HackerNews huggingface dataset:
Meanwhile, patients need 6 weeks of physical therapy before they can get an MRI as a direct result of a lack of helium. Even diagnostic MRIs in which PT is not indicated. The government trying to sell a crucial asset necessary for healthcare technologies is a sign that the government is not able to take care of domestic affairs.

They may have been trying to sell it before, but the lack of leadership on a critical resource like this is a bad sign.
These are the kinds of armchair moralizing stories about the service industry that the consumer class actually believes about themselves. 99.9% of the time when people would say "If they would've done it, they would have gotten a tip for it..." it's just not true. Drivers are not getting tipped for spending 45 minutes walking around apartment buildings trying to find elevators and struggling to read the font-of-the-month printed on doors and they have to do this dozens of times every day in order to get $2.50, the base pay for a doordash order, and to make an annual salary that is a rounding error of the salaries of the people that they are delivering to. I get it, life is unfair, and not everyone can make the same amount of money. But don't act like we live in a paradise that doesn't have extreme inequality and class tension when you use an app that summons a member of the underclass to do your bidding for $18k per annum and they are rude or have a fucking attitude with you.
The best regulation is written as if it would be implemented and/or interpreted in the worst possible way. As if it would be used by your worn enemies against you.

Would manufacturers be required to brick devices that cannot be fixed in software? For example, if an MCU didn't have a hardware implementation of a particular crypto function.

Could a device be sold even if the end user had to take action in order to update the firmware? For example, would a manufacturer be encouraged to have every device "phone home" for "updates" without a method of operating in a network where outside Internet is unavailable?
By continuing to be a Chase customer, you are supporting their predatory stance, and signaling that it's okay for the rest of the industry to adopt the stance as well.
That may be common circumstances where a union becomes the only viable option for the workers, but unions have additional benefits that something like it would greatly benefit the software industry.

In particular, it's the assignment of work to the union and then the union is responsible for pairing workers with the assignments which enables the union to create a training funnel where different requirements of the same job can be split among different workers of varying seniority such that apprentices are able to work on the easier items even when there are things beyond their skill involved in the overall work assigned to the union.

Typically a union does primarily exist to create CBAs for wages but this is another function of them which I think would be very helpful for SE and future protection.

So maybe not a traditional union is necessary, but I think there are some functions more or less exclusive to unions right now that would be beneficial to apply to SE. Hopefully that makes sense
SBF Pumped a Competitor for Info
Could you summarize what these "security updates" would entail? There are 1000s of attack vectors, so it would be difficult to practically define.

It's awfully vague to the point of just being more regulation that allows selective enforcement, which reduces competition and leads to boilerplate allowing FCC department growth, without improving the situation.

It will serve as a barrier to entry to new entrants. What's worse, is that this will create the illusion that IoT is in any way secure. Some IoT is secure, but that standard is unrealistic to apply to consumer devices.
Someone smarter than I and more versed in the legal matters should shape this concept: if you go bankrupt, your source code gets released. I can already see some small problems with this but the general thrust is, I think, not unreasonable.
> And I know about the Shadow Brokers. Not personal information.

"Tools and methods" are in fact considered more sensitive than any personal information in the IC. The system you're proposing presumes the existence of at least one unhackable organization, and I regret to inform you that there is no such thing.
How about requiring devices to implement key security-relevant features in an immutable way, such as via FPGA, so that attackers have no way of circumventing those features even post EoS.
Do you actually have an airship startup? What are the challenges you are facing? Do you need software engineers or funding?
I don't think they will or at least not with QMK running in the background. They would need to switch to ZMK first in my opinion.

See this comment chain: https://old.reddit.com/r/olkb/comments/s95y98/is_bluetooth_w...
It's not even Skynet. Imagine if in a few years we can make a big LLM that reads and sends emails instead of an organization and can make decisions. I don't think that's that far off.
AI snake-oil usually degrades and wears off quicker over time when it is approaching its expiry date as more people realize that it hallucinates often without transparent explanation; study finds.

Unexplainable black-box stochastic parrots are no different to this no matter how cleverly packaged they are by AI bros.
You can use adaptors for this. Adaptors let you request a third party API via the `adaptor` field type.

Docs are limited, but there's a reference data shape here: https://github.com/measuredco/puck#adaptor

Example implementation here: https://github.com/measuredco/puck/blob/main/packages/adapto...

Example usage here: https://github.com/measuredco/puck/blob/main/apps/demo/app/c...

You can either use it for a specific prop (i.e. `name`) or spread the result of the API call across your entire component (use the magic `_data` prop).
Free software firmware would be great for free software lovers and tech experts, no doubt. But sophisticated users who'll take advantage of things like that are only 1% of the market.

But if the aim is to stop DDOSes from botnets of poorly secured IOT devices, we need something to help the other 99% of the market.
The arrogance of you.

You can do more on a single server than hosting "landing pages" or "personal blog".

I host seemingly complex projects with simple methods, without needing any complex k8s crap.

That's what you people aren't getting.

You're so full into the complexity that you don't see the simple solution as something worthwhile.

WHAT about k8s is more battle tested than decades of doing the simple and efficient on a 1-3 servers?

You're brainwashed. Possibly even a shill of one of those expensive cloud providers.
But you can't limit it like this... the airspace is public!

So for commercial flights... sure - but there are a whole host of private pilots owners that absolutely can do this.

Ex - how do you think news helicopters work?

Basically, I'm saying that this phrase

> "who would trespass using public airspace"

is non-sense. You can't have public space that is being trespassed on. You can apply some limitations (ex: a pilot's license) but many drone pilots already need to be registered anyways.

At best, you can argue that there was a clear expectation of privacy (aka: the same argument that prevents you from pointing a telescope at the windows of a private bathroom from public land) and make it illegal after the fact, but I don't really believe that the courts will accept that you have the same expectation of privacy in an outdoor area visible from public space (incl airspace) as you would in a bathroom.
There is also property for sale in Menlo Park, as well as San Dimas and Laguna Niguel.

https://disposal.gsa.gov/s/searchproperty?state=CA&type=ALL
I'm sure the number of routers running OpenWRT is dwarfed by the number of OpenWRT-compatible routers running vulnerable, stock firmware.

Allowing people to install software on their hardware isn't a cure for vulnerabilities. It's a step in the right direction for sure, but it's a very small one from the perspective of something as huge as "IoT security".
If you're willing to mod the case (or buy a new case you're willing to mod) I can strongly recommend a CF2IDE relocator

https://retroready.one/collections/adapters-interfaces/produ...
> Meanwhile, patients need 6 weeks of physical therapy before they can get an MRI as a direct result of a lack of helium. Even diagnostic MRIs in which PT is not indicated.

I've never heard of this, can you link to something discussing this?
They're definitely making efforts to engage where practitioners and subject matter experts are. Substantial Federal gov showing at defcon this year for example.

https://www.dhs.gov/news/2023/08/11/secretary-mayorkas-deliv...

https://www.politico.com/news/2023/08/11/def-con-hackers-spa...

https://arstechnica.com/information-technology/2023/05/white...
I’ve been doing this for a while, using a bot that attends meetings for me, records and transcribes it, and sends me a summary. I’ve seen other people do this too with meetings I do attend.

These are big-audience meetings usually with one person presenting and then a Q&A.

I read the summary and then if it looks interesting I listen to the meeting when it’s convenient.

(Not gonna shill for the app: it’s just one of the ones in the Zoom “store” — there are several).
That's a great question. Devices that emit RF could be hijacked and turned into signal jammers. With smart jamming attacks, even low-power transmitters could potentially cause serious harmful interference to other devices. Botnets of compromised devices could be especially damaging. Since vulnerabilities are often chained by attackers, sometimes in very unexpected ways, to accomplish their final goal, we think that the FCC has a legitimate interest in just about any vulnerability on a wireless device. But the question of legal authority is itself open for public comment and we hope there's vigorous debate on the record to make sure we get it right.
I'm generally skeptical of the efficacy of regulation to solve a problem. Can you please cite some examples of where FCC regulation has been successful in solving other problems, and explain why you believe iot security regulation is likely to help?
Thanks! I am thrilled that so many people are participating. The FCC is going to need a lot of this community's input over the next few years as more and more devices go online.
Like the sibling comment here, I've seen this plenty of times too. Not on "most projects" or "most places", but certainly on most spectacular failures I've witnessed.
Funny you should ask, because peanut butter is called peanut cheese in the Netherlands. Becaaaaaause:

https://www.tastingtable.com/893109/the-unique-history-behin...
Even if you can look at the open-source code, it's still a maintenance nightmare to try to build on top of it, it just moves too fast.

Much like any user could fork Chrome in principle and scratch their particular itch, but the sheer pain makes that not worth it except for motivated, organized teams

I'm not sure reverse-engineering some Java bytecode is even the rate-limiting step at this point, I'm more demotivated by the knowledge that everything will break again with energy-sapping frequency
California could solve their water problem if they wanted. Desalination is a proven technology that could alleviate all of California's problems. Israel gets over 50% of their water from it.

https://www.scientificamerican.com/article/israel-proves-the...

California could power it with nuclear energy; they already have nuclear power plants and they have all of the engineering talent they need to make it happen. They are simply choosing not to solve their problems. In fact they are doing the opposite, they are shutting down their nuclear reactors and exacerbating their water problems by continuing to allow farmers to use all their available water on inefficient crops like almonds.

It's honestly mystifying how a state full of so many smart people and with one-party complete control of politics is unable to solve a basic problem for which they have all the tools. They really don't have any excuses.

Florida, on the other hand, yes they do have a hurricane problem. I don't know what they can do about that.
From now on, corruption is a secret and therefore informing on it should carry all the weight of the law.
It's not just prod, it's any shared environment that needs to live for some time. An example is an integration environment, especially if it's shared by multiple teams.

A "pet" is a machine or environment that you can't easily delete and replace. Nothing we're discussing can't easily be deleted and replaced. What you're describing relates to some other property.

As for "dynamic", with Argo you can just edit the namespaces of Applications in a branch and deploy a new environment.

> it would require constantly committing to some repo

If you have an automated CI/CD pipeline, you already do this anyway.

It's not clear to me what kind of operation you're thinking of, but in the same sort of way that k8s is overkill for many scenarios, so is ArgoCD. But the issue is not that it encourages pets or can't easily handle dynamic environments.
Sure, but for the most part interesting weather phenomena come from surface area, not volume.
> What's stopping hobby/micro-developers from saying 'Not FCC approved, use at own risk'?

OP is. Or rather, he wants to make it impossible to opt out. At least that's how I interpret these two paragraphs:

> The FCC recently issued a Notice of Proposed Rulemaking [2] for a cybersecurity labeling program for connected devices. If they meet certain criteria for the security of their product, manufacturers can put an FCC cybersecurity label on it. I fought hard for one of these criteria to be the disclosure of how long the product will receive security updates. I hope that, besides arming consumers with better information, the commitments on this label (including the support period) will be legally enforceable in contract and tort lawsuits and under other laws. You can see my full statement here [3].

> But it’s too early to declare victory. Many manufacturers oppose making any commitments about security updates, even voluntary ones. These manufacturers are heavily engaged at the FCC and represented by sophisticated regulatory lawyers. The FCC and White House are not likely to take a strong stand if they only hear the device manufacturer's side of the story.
It allows users to replace insecure software with secure software. And it allows updates long after the company drops official support of the device.
Consumers consistently vote with their wallets on this, and based on their behavior, they don't care.

They will buy the cheapest devices they can find on Amazon, made somewhere in the far East, and as likely to set their house on fire as punch a gaping hole in their home computer network, when there are much better made, well-supported alternatives but they cost more.

If you want to make a difference, an FCC sticker won't do it. Consumers will go for the cheaper one without the sticker. You'll have to mandate whatever minimal level of support you want these companies to provide.
All that means is that US wages are too low. But, be they what they are:

- 300 grams is not a bad serving.

- for the folks on minimum wage, its only 12% of their income which Im not sure if its a bad ratio historically.

- "man does not live on bread alone" ie, you can't eat cheap ham everyday, nor should salmon be a daily staple. But variety of food is a necesity, not a luxury.

- ham at $2/lb sounds disgusting and probably causes more health problems (nitrates) than just eliminating animal protein.

- My wife used to live on minimum wage with no external help padding her income. She still ate a serving of fresh salmon every week.

Im sorry, but if farmed salmon is a luxury, as a society our standards of living have collapsed.
The Nokia Lumia 1310 was the best phone ever made. Best UI, best screen and Camera of its generation, and you could program apps in C# for UWP so they ran on Desktop or Mobile (For that reason, there are still hobbyists who sideload new apps on their Lumias since the SDK still exists and works on modern windows). Like all things, Microsoft made the best version of the product, but not the most successful version
I can think of a use case for me: Sometimes I got invited as an optional participant. Most of the time, I don't attend. If I can receive a summary focused on my area, where the decisions affect or depend on my end, it would be nice.
Ask HN: Why Substack kills startup newsletters? Any ideas?
We recently started writing on substack about recruitment in general, and mostly offered tips to readers on how to improve their hiring practices. Just 4 or 5 posts in we got cancelled!

We are a startup in the segment (candydate.app), so we make sure not to write advertising or try pushing our service when writing, the idea is people must get value from the text and being able to implement stuff without us or our service. That said, we do say who we are, we even started the blog with its first post explaining why we build our product.

Without notice, Substack simply closed our blog and ignored our appeal, clearly not reading any of our posts to make sure there was no "spamming or phishing" like they said we did.

Anyone in the same boat? I was with the impression those guys were the best option to write more technical or non fiction stuff.

They also closed 2 of my other blogs (luckily I did not had time to start writing for them yet, one about real estate the other about venture capital) All gone!

Just curious to see how anyone else feels about them,
Yeah I'm just talking about this at a high level.

Its basically the same problem, so much auto-processing is done to make pictures generally look good, so that so many intentional pictures just look disappointing.
I was born in Florida, and the climate is basically the same as it has been since the 90s. When I was young I would explore all the abandoned orange groves in central Florida, that suffered from repeated freezes in the 70s and 80s, where prior to those decades, citrus was reliably grown (orange trees are extremely vulnerable to freezes). If anything the current climate is a return to 19th/20th century norms for Florida. You can reliably track the swings in climate in the state by looking at the growth line for citrus, and the freeze line in general, which has been tracked for close to 200 years. I suppose I'll start worrying about the climate when they're able to grow oranges in Georgia.

I wish climate change were scary enough to keep the state from doubling in population every 10-20 years, but alas.
There is too much information flowing between humans right now. AI can help filter it.
> Unfortunately, this will never happen.

They only do it because people buy it from them.
The wikipedia on this provides some context

> The National Helium Reserve, also known as the Federal Helium Reserve, is a strategic reserve of the United States, which once held over 1 billion cubic meters (about 170,000,000 kg)[a] of helium gas. The helium is stored at the Cliffside Storage Facility about 12 miles (19 km) northwest of Amarillo, Texas, in a natural geologic gas storage formation, the Bush Dome[2] reservoir. The reserve was established with the enactment of the Helium Act of 1925. The strategic supply provisioned the noble gas for airships, and in the 1950s became an important source of coolant during the Cold War and Space Race.

I for one am in favor of keeping it as a national resource in order to prevent the development of a zeppelin capability gap between us and the enemy.

EDIT:

I appreciate the rebuttals below, apparently Helium is important in the usage and production of MRI, IC fabrication, and cooling nuclear reactors. Pushes a reconsideration of the sell off, plus the possible resurgance of steampunk.
> their $8 Mcdonalds order be brought to.

Their $8 McDonalds order with a $14 delivery fee.

Look, the customer base for Uber eats is lazy. That’s why they are ordering McDonalds delivery in the first place. Guilting them for meeting at the door isn’t going to work.

In New York, if I’m coming to the door to meet the delivery, then I may as well just walk the 1/4 block to get it myself.

Delivery has figured out how to get to hallway doors for 50-100 years. This is a solved problem.

If drivers don’t want to fully deliver then don’t do delivery.

Now I live in the burbs and ordered Uber eats for my family and the driver wouldn’t drop off food to my door and called to say come out to the driveway to pick up my food. It was kind of weird. They sat in the driveway and wouldn’t bring the food to the door.

This is very different from Brazilian inner city or even an urban setting but it was strange that the driver didn’t want to walk the 30 steps from my driveway to the door.
awesome application! upvoted.
Really? If we're going to arbitrarily require a competence test for all voters under 25, then I say we should also mandate a competence test for all voters over age 65 (he hasn't proposed that one for some reason). Ironically enough, Vivek himself might fail the test (that he wouldn't have to take given his age), seeing as he seems to think the Constitution was ratified before the end of the Revolutionary War.[0] Given that, I wouldn't trust him to write such a test, or to appoint people to write one. So who exactly would write the test?

[0]https://www.msnbc.com/the-reidout/reidout-blog/vivek-ramaswa...
By “their bicycle / other capital” I meant like a car or tools/bags/accessories.

But I think I maybe understand what you’re saying?
> The unfortunate truth is that we have so heavily subsidized and centralized food production that anyone focusing on biodiversity, sustainability, or even animal welfare can compete economically.

I don’t believe this, because the Amish down the road present a living counterexample. They are not only self sufficient, but they produce a surplus of frankly superior food at competitive prices.

Likewise you can get healthy and affordable (average around $3 per pound) beef from a local farmer by buying a share of a cow on the hoof and then taking your share after slaughter.

The two main “catches” that come to mind are that you only get fresh food when it’s in season and you need some kind of preservation story for when it’s not.

Since you admit your relative lack of expertise, I caution you against extrapolating too much from your personal anecdotes.
A Programming Language for Emotion
Film photography, for me, is the most affordable way to get into medium/large format photography. Not really excited with 35mm because full frame bodies are getting more affordable.

On the other hand, the price of used GFX (50S, 50R) bodies are also getting more affordable. Yes I know some people consider it only "slightly bigger than FF and not true MF". Well, more than enough for me. And of course Hasselblad XD or Phase One system is definitely not in my range.
I'm not a US citizen, but I too would cosign the idea of not using security updates as a vector for pushing monetization "features".
Where in the World Are People Back in the Office?
At the very least, manufacturers should have to notify all users or via press release when a product has been compromised or can be compromised via a known attack, with maybe some required details like the severity of the breach and possible outcomes.
Article doesn't seem to be available on the internet?
The 2004 bill was supported by the Labor party.

The central point of the bill was to formalise the intended constitutional intention and, if there are to be any changes, that this decision should be one carried out by parliament and not by courts.
I highly doubt we will, if we haven't already in the last hundred thousand years.
developing it yourself reduces that delay! and no photo shop staff to look at your photos.
It's not for editing UIs like the OP's post. This is for editing nested lists. So it's probably not what you're looking for. But I made it because when I looked for a vue library that could do what I needed, I didn't find one that I wanted to use/thought would work.