skysight-inc/HackerNews huggingface dataset:
Firstly you have to appreciate the web isn’t a thing. When they want to talk protocols and crypto they mean things like sockets, mqtt and talk about where on the production line the fuses for the keys will be blown and who will have access to that area. It is a different universe.

The absolutely huge thing is they want to live in a world of standard interchangeable pieces. They despise custom solutions to problems unless totally necessary or they are enormously better than the alternatives.

They will flat out tell you that they are essentially waiting for an industry standard solution to problem X to appear, and until it does these ad hoc solutions suck.

If you want IoT security you don’t need to regulate it, you “just” need to create a no-brainer to adopt industry standard model for device operation that these people can drop in place. (I hate MQTT, but think something in that ballpark with the right security model* would be a good starting point). This is a hard enough ask as is, but is made harder by the big software giants all trying to come up with schemes that put them in the middle all the time.

As an aside I also encountered a non Taiwanese executive espousing the view (with respect to slurping up network topologies via multicast) that he hates it, but as long as it isn’t illegal they have to do it. I don’t believe the law would help as you will always have bad actors and people using aliexpress - it needs to be technically impossible, hence the star networks.

Edit to add: * and provisioning process. Were it up to me I'd have something like NFC based key exchange between broker and device during setup as part of the standard.
"I'm going to leave this here, just like I'm supposed to do according to my work contract" is sympathetic. "I'm going to eat your food and make a video of myself doing it and put it on the internet" is extremely strange.

In the end it's sort of a feel-good story. Watching that video I'm reassured that I'm not the only one whose culture is in decline...
I suspect this project is going to consist of a very loud minority of folks. I'm working for a very large company right now and they've been mandating us to move all of our TF code to Terraform Cloud for the last year, and I've not heard a peep about this licensing issue. I'm assuming they're going full steam ahead and don't care about this issue. As long as the TF Cloud service is easy to use, still a SaaS so it's TF's problem vs the companies, and they allow a robust login / access pattern via OAuth / SAML, all is well.
// Looks is paramount - I worked so hard to be financially stable and didn’t realize that it wasn’t my parents financial situation that had fucked me over so badly in life - it was their dogshit genetics that made me ugly.

A guy with a job and a gym membership is more attractive than 90% of men by default. Do you really have a "looks problem" that wouldn't be resolved in 12 months by actively working out, eating well, a good haircut and a great wardrobe?
Old style? What other gases are used?
https://news.ycombinator.com/reply?id=37371918&goto=threads%...
Releasing Signing keys seems a potentially dangerous one. Someone could produce malicious firmware, sign it, and convince your device to auto-update with it.

I think (and I'm a security know-nothing, so could very well be off in the weeds), the firmware should accept updates signed with two keys. The manufacturer key, which can allow automatic updates, and a post-service key that cannot be automatic. Either a user has to initiate the firmware update manually, or consent via some other means.

This post-service firmware may very well enable a third key for automatic updates of its own, so there's just a manual step on the transition from manufacturer to some community project you support, not each revision afterwards.
Sounds like a no to me.
DVD's are like $1-2 each now used, what's the benefit of a subscription service?
Another good thing with Poetry is that it enables tooling support for the Polylith Architecture (as plugins). :)
Isn't that a bit overreaching? I can make you a device the spews garbage on any wavelength you fancy, so they're really only preventing accidental radio pollution. Even in that case it's pretty unusual to prevent a consumer device (other than a radio) from being used in an unlawful way, Part 15 notwithstanding.
Satellites (points), swarms, rings, sails along a spherical plane (e.g. spherical lune w/ axis along ecliptic)… seems like ”realistic” progression.

In a far-future where a TNG-inspired Dyson structure were somehow feasible (1AU size, habitable surface on interior, etc.), it’d be incredibly disappointing if we applied the (unrealistic) science and (unrealistic) resources towards building such a thing, rather than interstellar efforts. Buuuut maybe I’m just projecting my disappointment with our planet’s current approach to science and resource utilization.
This is a great idea! Just last week my wife had to connect our oven to the wifi to use an app to control it, and I was thinking about how there's basically no guarantee the oven won't just become a botnet on our internal network eventually. It would be great to get some legal requirements on this stuff.
- "This was one of the big issues at the start of the Ukraine invasion because they're one of the world's preeminent suppliers."

That one was actually neon. It has nothing to do with natural gas; it's a byproduct of the cryogenic distillation of air, which steelmakers do on an industrial scale to get pure oxygen. As you point out, here's not much helium in the Earth's atmosphere; rather, since it (helium-4) is the product of alpha decay of geologic thorium and uranium, it accumulates in the same kind of places as natural gas. Hence: Texas.

There was a large HN thread on the neon thing here,

https://news.ycombinator.com/item?id=30457490 (422 comments)
How BYD snatched Tesla’s crown in China
Britain’s statisticians fix a blunder and find a bigger economy
Interesting. Wouldn't that require a firm understanding of the project scope and a steady hand at rejecting any attempts at feature creep or redefining the scope (with the politeness required for not losing them as customers)?

In other words, wouldn't this scoping and pre-planning go against the latest findings of lowercase agile?
McDermitt Caldera may be among the largest known lithium reserves in the world
If expectations are not established with the client, they will make assumptions and they won't be in your favor.

I think you can shorten this statement even more.

Clients will make assumptions and they won't be in your favor.

The goal is to limit those as much as possible, but they'll still happen. "Fixed price" is largely not fixed anyways, as you should always account for change requests and other budget altering mechanisms. I don't think I've ever seen a non-trivial project not have some level of change once work has started.
This is just an effort by Big Outdoors to get us to go outside by giving us nothing else to do. /s
It’s obviously technically feasible, it’s just not commercially offered…
The trick here is that US police are absurdly unprofessional in nearly any way. With guns it's even worse, as a mythical "good cop" with a gun gets only a single magazine a year through work to maintain proficiency, and depending on the state requirements, might not even have regular testing of their shooting abilities. Police in the US regularly shoot things that weren't even close to their target, and their standard training is to just keep shooting until they need to reload, whether or not it really makes sense. They are also taught that everything and everyone wants to murder them, and they should shoot first, and that their life is more important than justice, and other things that make them so paranoid they think it's normal to always face the door at a restaurant like my anxiety crippled girlfriend.

Meanwhile plenty of them are in right wing militias.
What do you mean by "no"? Are you denying the existence of my grandparents who trust me to manage their devices?
Azure Pipelines – Batching your CI builds
Github.com is back up for me in San Francisco. At least it let me login and create a new repo.
What is the appetite for requiring the firmware/software source to go into escrow, such that if the company goes out of business or stops supporting the hardware, the software becomes open source and public domain?

This would incentivize companies to provide updates but also allow the community to take over if the company folds.
Even if you give control to the users, it's up to them to use it.

I'd argue that the main blocker to IoT security is the lack of culpability on the part of device manufacturers. I don't want to go so far as to suggest that companies should be wholly liable for software bugs, but vulnerabilities that are brought to the attention of the company privately or disclosed publicly absolutely should be their responsibility to address.

For you or me (or most of the folks here I suspect) we feel better if we had the ability to decide what software our fridge runs, but for 99% of people they're better off if their fridge's manufacturer provides them with regular security updates for the life of their product.

That being said, these aren't mutually exclusive. In a perfect world we'd have laws compelling fridge companies to allow 3rd party software if they don't keep their firmware up to date.
I'm not sure which docs you mean specifically, but most of the docs are fairly unchanged (other than trademark stuff) from the original repo, so if any of the docs improved, then to give credit where credit's due, the kudos should go to the Terraform Core devs.

Disclaimer: Work at Spacelift, and currently temporary Technical Lead of the OpenTF Project, until it's committee-steered.
This is insane.

Is this unique to the US legal system?
What are we ignorant of? Airships of the non-inflammable variety use helium.
[Update: I did not read the original proposal carefully. I mistakenly believed this was a mandated regulation and not a voluntary one, so some of the points in my post do not apply.

However, I still oppose it for mostly the same reason: if consumers wanted this type of label on their products, then we we would likely already see it.

I am also skeptical that this is being initially proposed as a voluntary program, but is actually laying the foundation for a regulation that is mandatory.]

Please do not propose this regulation. If consumers actually cared about their IoT devices receiving security updates, companies would be doing it. The fact that companies are not already doing this is evidence it's not important to consumers. People may express frustration, but their purchasing behavior speaks louder than their words.

This regulation would force companies to work on things that customers don't actually value. It will hinder innovation. Companies could work on features consumers value instead of working on security updates that consumers do not value.

If this regulation passes, companies will be less likely to offer new IoT devices knowing they will have to provide security updates beyond what consumers are demanding.

This regulation will also increase costs for IoT devices. As a consumer, I do not want the FCC mandating what features will be included in my IoT devices.

From the perspective of an individual engineer, tech regulation like this often leads to engineers doing soul-sucking work that nobody cares about. I know your focus is on consumer protection, not producers, so that point may be irrelevant.

Please do not be the individual that causes a negative impact on the world, despite whatever good intentions you may have.

I'm guessing if the FCC enacts this regulation, it will help you in your political career. However, if you were to take the opposite stance and oppose the legislation for the reasons stated above, I'm sure you'd lose your job very quickly. Therefore, I am confident I will be ignored.
Rather than longish term trends -- let me share very short term fluctuations I saw in ChatGPT Plus.

It seemed like there is some throttling / capacity management happening behind the scenes. For very similar level of complexity and work tasks, during peak time (US day time) I felt the responses lost context or ran into error loops more often.

Similarly working with plugins (Notable in my case) seemed to work fine in off peak hours but got more prone to losing the place, forgetting the default project/notebook, or even in one case simply limiting itself to adding code cells but not executing them -- and instead asking me to go and run the cell and report back the results. At better times it would run the cell, parse any errors, correct the code, and run it again till it gets it right. The amount of code documentation and markdown inserted also seemed to vary wildly. I am not sure houw much of this is tweaking in plugin configuration by Noteable though.
I clicked on you because I was curious and noticed your bio says you live in Nevada still if you care.
Average concentration of helium in natural gas is 0.05%, anywhere from 0.01% to 7%. U.S. proven reserves of natural gas contain over 10 billion cubic meters of helium even when simple extraction methods (that capture about 1/3 of it), are used. Problem is exaggerated.
Filing a Motion To Dismiss is always the first defense against a garbage suit like this. Unfortunately, the plaintiff also gets to argue, which means you need big legal fees just to file it.

There are legal foundations for all sorts of causes, and they're mostly 501(c)(3) organizations. So I don't know why there can't be one for scientific whistleblowers as well.
I'm sure it has always existed, but has seemingly gotten much worse. I'd say the general boom in demand plus the continual upwards price marches of trumpflation have made the dynamic much stronger.

There's also a general feeling that the pandemic "changed things". I can't quite put my finger on the whole extent of that, but I can definitely see the overall feeling of everyone being out for themselves contributing to shamelessly playing the BATNA.
There is no need for a company to be able to pre-book slots.

If you need an instructor to join you during the exam it can be booked with the instructor AND the test taker's identity.
earlier this year, a team i'm no longer a part of switched from using AWS CodeCommit to using GitHub. at the time, i questioned why switch to something that goes down a lot. the response was it never goes down. the next week, outage. there was no valid reason on why switching to github other than "some potential VC questionnaire asked if the company was using github". i'm much happier no longer being there when these kinds of red flags are replaced with klaxons
The substance of your comment was performatively pretending that someone else was too dumb to know the difference between RFK and RFK Jr, when obviously they do. Literally nobody has ever confused that anti-vax moron for his famous father who ran for president and died over 50 years ago. You were play-acting as a virtuous corrector of "misinformation" as cover to try and derail a conversation into an unrelated political flame war. If you must stoop to that sort of thing, the least you can do is bother to get your facts right.
Snowden is not Australian.
If a company isn't ready to compete against someone/something that is using the code the company has written and published as FOSS, then yes, please do not use FOSS licenses for your "Open Source" product.

One would think that the companies thought this through before publishing FOSS code, but seemingly there is a lot that didn't do that.
Some of their modules are great for learning the basics. Their forum is atrocious for being a Cybersecurity training platform. Spam Galore.

https://tryhackme.com/forum/
The only time I've requested delivery to my door was for a grocery delivery when I had a herniated disc and could barely walk. I am totally willing to leave a good tip for such service, but when I order it that way, it is REQUIRED.

I had the delivery driver do a half ass attempt at contact, he ignored my instructions and then he simply went home. No, that's not acceptable. I reported them to the company.

I sympathize with delivery folks, to the point where I almost never order delivery in the first place, but when I need it, I expect it to be full service.
Sorry for the confusion. It's dangerous for junior developers to interact directly with cloud providers. Our motivation is to provide guard rails for developers of all skill levels to build and run their infrastructure without exposing their organization to risk.

Here are some dangers we've seen from our customers:
- Misconfigurations that result in no backups, disabled encryption, etc.
- Resources accidentally configured with Internet access
- Exposing internal secrets or credentials in source code
- Misconfiguration of IaC that results in destruction of databases

I'm not claiming that we have eliminated these dangers. Instead, our goal is to provide a platform for software teams to codify their security and compliance practices so that all developers on their team can avoid these dangers.
>Humans are addicted to convenience no matter the cost.

Another way of stating this is that people pay for convenience, and why not?
It's a lot easier to not shoot someone or get into violent crime in general when you have the option of just taking government assistance and trying to better yourself.

In the US, because of obscene paperwork and often actively hostile to poverty policies, it might be easier to just join a gang to survive.
And this is part of my point: by the time microsoft kills old computers, if they even do, they'll be 10 years old, not 2 years old.
Or, you know, go to getfirefox.com and download a better browser.
My guess here, to help it make sense, perhaps think in terms of the luminous excitation of "blacklight paint"... If she's having strong reactions, probably to metamers under the right lighting in a real-world environment and not constrained by the gamut of a defined colorspace like some flavor of CMYK or RGB...

Here's a real question for her on the subject, how does she see a blacklight? I expect a true tetrachromat to see it nearly white. But also I wonder if she's sensing a fluorescing that is of sufficiently short wavelength that standard vision can not perceive it.

The implants I have in each eye are different technologies. The right eye has no UV filter, the IOL in the left eye does have a UV filter. When I look at a blacklight with my right eye, it's bright, almost white in appearance.

But looking at the blacklight with my left eye, it looks like what most see, as a very dark purple with almost no visible light.

A friend of mine is an artist who has been experimenting with extreme metamerism, using pigments that radically change perceived color under different light sources, including of course, blacklight.

Since you mention hiking, I wonder if some of the plant life you and your wife encounter have any florescent properties, or perhaps interact with some fungus that does... A portable UV light at night might be interesting...
"Or better, you can do the same thing that three people managed to do in the entire industry in the last 36 years."

I mean, don't get me wrong, I'm all for improvements in AI efficiency, but maybe there isn't that much low-hanging fruit to pick? Tons of papers get published on transformers optimization techniques and barely any of them seem to stick.
The [Kinesis Freestyle Edge](https://gaming.kinesis-ergo.com/edge/) is what you want. It's a full keyboard, with extra keys you can map, and you can choose what switch you want. It's marketed for gamers, but it's good for everyone.

My one complaint is I find the space bar too large. I started used the Freestyle after decades of MS Natural keyboards. It took a while to get used to the size of the space bar.
and invited speaker at Google with publicity

https://youtu.be/GQywxCy-Dz8?si=Hu8X5jKnnjLmFQDy
By planting for 3 years in a row, pests that target something else in your rotation will die off. Of course the trade off is pests that target the crop you are planting 3 years in a row will have more opportunity to grow.
I think the lesson here is bespoke software is probably a bad idea for a lot of companies and you're better off buying off the shelf shit. I think this is particularly hard for a fortune 500 company though, especially for something like a website. You're too big for a Wix site but employing a team of developers is going to cost you an arm and a leg and it's really not in your wheelhouse. We'll probably see more software outsourced going forward.
At this rate of escalation, he'll be ranting about precious bodily fluids by November.

"Have you ever seen a microservice drink a glass of water, Mandrake?"
Funny how your comment reads like my iPhone user experience (minus the "pay your access fee today!")

I personally do not have a problem with these serfdoms, as they meet a real, functional need. It does suck that there aren't as many easy alternatives for smartphones as there are for laptop computing.
Funny, I was thinking of doing just this exact thing to learn haskell.
Found it, it is a pretty recent paper.

https://arxiv.org/pdf/2308.13449.pdf
At least Chromebooks are secure out of the box.

It's sad Google seems to be the only player in this space who really cares about security. Every other OS is a shitshow by comparison.
Taking the devil's advocate side for a bit: this is what defamation law is for. If believed, these allegations basically end her career. It's good to have recourse in law against baseless accusations of this magnitude. I'm not even surprised that neither Harvard nor the three institutions the authors of the Data Colada blog are prepped / insured for this: this kind of lawsuit would mark the person levying it as dangerous to work with in general and probably mark the end of their academic career one way or the other. It's an exit gambit for someone who will not be working in academia in the future.

The breakdown in process is a failure to protect the defendants until the lawsuit is resolved. That issue is kind of endemic to how law is done in the US; the process is expensive, and the costs sit on the shoulders of the parties involved until the suit is resolved.

It'll be interesting to see how institutions react to this suit in the future. I imagine a pool of insurance money against spurious defamation claims would become standard, especially among the universities that gather more reputation from spot-checking other people's work than from producing trail-blazing research.
We are a Hashicorp Tech Partner (https://www.hashicorp.com/partners/tech/nullstone#all). This partnership requires that we're not competitive in nature.

We have plans on our roadmap to support other IaC tooling if Hashicorp makes future changes to their licensing that prevents this arrangement.
Good examples! I'm more familiar with 911 but I know it also contains nightmare pains in the butt (e-911 software requirements).
The "TF" part could be anything! :)

Open Technology Foundation is one suggestion.

Backronyms are a thing people.
And not just anywhere in Nevada, but Incline Village. Pulled that up on Redfin and I can see why someone would be tempted to brag.
If you like something, that doesn't necessarily mean it is good
Three Email Templates to Get Your Boss to Pay for That Course
If you have an email that worked to convince your boss to pay for continued education please share and i will add you to the post with attribution
Training still relies on very low latency connection between all the devices. When distributing training across multiple machines most people use machines in close vicinity connected via infiniband to have the lowest possible latency.

Going from that to the dozens to hundreds of milliseconds of latency on the internet, or the hours if you do classical SETI@Home, is a big step. There are people working on it though.
I don't even agree with private oil being a thing, natural resources should belong to the public.
Steam-on-Ampere