skysight-inc/HackerNews huggingface dataset:
I remember going to my cousin Tony’s and playing Mafia Taxi Driver on PS2 where it would take several minutes for the level to load and then I would go on a boring drive to the other end of tow on where I was supposed to shoot somebody up at an Italian restaurant but I would get shot up instead and then have to endure several minutes of waiting and driving to try again.

Then there was that GTA game where my son was pumped to steal a low rider and make it to the low rider show but it seemed he could never make it to the show without totaling it.
Maybe it’s just me, but I am really skeptical about the DeepFake part - it’s a theoretically possible attack vector, but the only evidence they possibly could have to support this statement would be the employees testimony. Targeting a particular employee with the voice of a specific person this employee knows requires a lot of information and insider info.

Also, I think the article spends a lot of effort trying to blame Google Authenticator and make it seems like they had the best possible defense and yet attackers managed to get through because of Googles error. Nope, not even close. They would have had hardware 2FA if they were really concerned about security. Come on guys, it’s 2023 and hardware tokens are cheap. It’s not even a consumer product where one can say that hardware tokens hinder usability. It’s a finite set of employees, who need to do MFA certain times for certain services mostly using one device. Just start using hardware keys.
The cycle of tooling

Step 1: Look I've made this new great tool that uses a declarative language, you simply declare what you want your environment to look like and boom it will build it out. No more having to figure out a complicated logic flows that can fail or having code that dies on weird error cases, and you don't have to be a developer to use it.

Step 2: The tool isn't powerful or flexible enough and the declarative code is getting to cumbersome so we've introduced some basic templating and logic flow to this tool to make it more flexible and reduce bloat.

Step 3: The control flow isn't powerful enough to really meet our needs so we have moved it entirely to a full programming language.

Step 4: Go back to step 1.
Ian Wilmut, Scientist Behind Dolly the Cloned Sheep, Is Dead at 79
> you can add comments

Given how many comment remover util functions I have written to make almost JSON config files proper JSON ... why could they not just have included those in the spec.
Hmmm, I think if we had similar (but roving, pastoral, etc) neolithic with population we do today (ok, doubtfully possible, but whatever carrying capacity), we'd never the less have resource fouling, resource depletion and we'd be sending soot into the atmosphere.
https://archive.ph/PXdmx
They were on the working group, they could have done a USB-C like connector. But I bet they wanted USB-C to basically be lightning and lost.
Just like nobody is buying 8 ounce coffee tumblers, nobody is buying 50 mile range cars. Electricity and coffee is cheap. The coffee tumblers and EV batteries are not. So you buy it bigger than it needs to be, fill it up as far as you can, and maybe share some before refilling.
There’s a lot of religion going on right now. Whatever that is in humans that encourages that, going back to tribal behavior, or survival or whatever, it hasn’t gone away just because formalized religions are weak right now.
I mean, there were definitely iterative improvements I think could have been made to the settings app, as with nearly all software. Instead, apple threw out the design for a ux that was clearly optimized for palm sized screens that you operate by touch in order to unify the interface between two entirely disparate forms of interaction.
The only liberty being sacrificed here is showing an ID at a pharmacy counter to get Sudafed. I'll stipulate that's a liberty being sacrificed, but it isn't "many".

This particular "logbook" has existed for almost 2 decades now, and its scope hasn't creeped from there, so your second argument is pretty easy to shoot down.

I think the evidence pretty strongly suggests that this policy, which was put in place to create a rate limit on the purchase of a chemical that isn't so much a precursor to methamphetamine as it is a slightly tweaked version
of methamphetamine, is in fact simply used to create a rate limit.
RustRover Is a New Standalone IDE for Rust from JetBrains
Teleport has two person rule + hardware token enforcement, https://goteleport.com/resources/videos/hardened-teleport-ac...
Just gave a talk on Monday about it in containerdays.io, but the video is not in youtube yet!

In a nutshell, with Kubewarden we strive to build the universal policy engine by:

- Provide all personas (policy consumer, policy developer, policy distributor, engine admin, engine developer/integrator, etc) with current and future industry-standard workflows, not only a subset of personas, nor more than needed knowledge for those personas. It's a bold statement, and if it would be universal it should indeed cater to everyone.

- This is achieved with policies as code, which are Wasm modules: Wasm policies allows us to support Rego DSL (OPA/Gatekeeper), YAML, SDKs for Wasm-compiled languages, and now an experimental Kyverno DSL policy by compiling it to WASM with WASI. Great for using your language and tools of preference.

- Wasm modules have first class support In OCI registries, just like container images: Use same tools that you know as artifact distributor: SBOMs, signing and verifying with cosign, airgap, slsa.dev, etc.

- Policies can be evaluated out-of-cluster: great for CI/CD, dev loop, integration tests, etc.

- Modular architecture informed by using Wasm policies: OCI registry, policy-server, k8s controller, out-of-cluster cli (kwctl), etc. This also helps in adopting future industry-standard workflows.

- Usual features of a Policy engine (mutating, context-aware, recurring scanner of already in-cluster resources, etc). Plus ample room for new features thanks to the architecture. E.g: possibility to run the policy-server directly in the k8s apiserver (one colleague already presented that in Kubecon), possibility to evaluate out-of-cluster policies outside of clusters like OPA just by running the policy-server standalone, more DSLs compiled to Wasm, more languages, etc.

- Vendor neutral, CNCF project, open source, developed in the open.
Cloud Savings Company Usage.ai Announces $9M VC Financing Round
> Can't name one art model you could run on your GPU from a FAANG or OpenAI before SD

CLIP could be used as an image generator, slowly.

> and can't name one LLM with public access before ChatGPT, much less weights available till LLaMA 1

InstructGPT was available on OpenAI playground for months before ChatGPT and was basically as capable as GPT3, people were really missing out. Don't know any good public models though.
> - People ran productive economies for hundreds (thousands?) of years on the Gold standard and it worked.

The Gold Standard (paper currency backed up rocks) only started in 1870. While gold (and silver) coins were used for some monetary needs, most (local) economies actually ran on credit:

* https://en.wikipedia.org/wiki/Debt:_The_First_5000_Years

> - The supply expands randomly when new deposits are found but this actually works pretty well. As the economy grows we get better at finding gold so prices stay relatively flat in real terms.

No it does not:

* https://en.wikipedia.org/wiki/Great_Bullion_Famine

Neither does it add to financial stability:

* https://www.theatlantic.com/business/archive/2012/08/why-the...

* https://archive.ph/FWKcL
I love me some Kent Beck, and I know your comment was tongue-in-cheek, but I doubt he was interviewed for this article. 1 month for that kind of a product is short enough that it’s either a clerical error or someone is BSing big time.
The IRS plans to crack down on 1,600 Millionaires to collect back taxes
That wasn't real whistleblowing?
Is there supposed to be a restricted demographic with a monopoly on identification? The overwhelming majority of Americans have one. Even the large majority of any given minority group does. And if this is a legitimate concern it could be mitigated by, for example, making it free to get a state ID. Address whatever prevents some people from having one, instead of not requiring it.

But also, isn't your disaster scenario the thing that happens in a democracy regardless? Majority rule when you're the minority.

What you're left with is the fairness argument: It's supposed to be one person, one vote. But that's the argument the proponents of voter ID make.
NestedText seems very close to what a strictyaml spec could be/have been. I'm curious if you've engaged with that project/format, and what you think of it.
When my computer can't even stay up for a full week without crashing, or suffer an inexplicable lag spike, etc., I become more motivated to closely examine everything to see what's causing the crash.
A Bad Performance Regression for Some Intel Systems Wound Up in Linux 6.5 Stable
There were open reproductions of DALLE1 like ruDALLE.
I spent a few months working on Godot and it was clear that the developers don't actually make games, and don't have the same priorities as me. I want a real solid foundation to build on.

Nobody likes to put down such a great looking open source project, but I decided it was not for me.
> What do you all think of this?

I think that it sounds like SEO for HN. As such, doesn't it carry the risk of reducing the quality (and so value) of front page stories?
Honestly IDK. There is a drain in the bottom, and the sides and bottom are all actively cooled and covered with aluminum. For my case it's in a very dry environment and I take it down and deep clean it each season.
Paying a few thousand bucks annually is not enough to get no-bs customer support :)
This laptop was destined to be an all-time classic, but they could never get the G4 to perform well in a laptop. They promised much, delivered little.

They never were able to deliver a G5 laptop. And then Apple went Intel, one of the greatest WTFs in recent memory.
Excalidraw/excalidraw: Virtual whiteboard for sketching hand-drawn like diagrams
Yes. But now it's produced in para-industrial labs, mostly in other countries, rather than in apartments and back yards, where those ad hoc labs were actually real public safety problems.
Lua is a register based VM.
WASI runners are just an application. I guess you need your kernel to run prograns and have syscalls, but that is a low bar.
Don't underestimate lobbying costs in dense urban areas. Whenever you have to deal with people the alternative is often easier.
https://setac.onlinelibrary.wiley.com/doi/full/10.1002/etc.5...

Bioaccumulation and toxicity of silver compounds: A review - Environmental Toxicology and Chemistry

It looks like the toxicity is highly dependent on upon the form in which silver enters the environment.
If the engines on your plane fall off mid flight, everyone doesn't die instantly. They die instantly after 30 thousand feet of screaming terror.

This comment screams lack of education about complicated systems. For example take overpopulation in things like grazing mammals. The funny thing about being overpopulated is that it is not instantly deadly. Once the mammals eat enough of their food source that their food source cannot reproduce reliably the game is over. But they tend to have reserves of fat and muscle that last for some period of time. The weakest die first. Then the population reduces. But the population doesn't go back to what was previously considered at the over population limit. No, populations massively collapse because there is nothing to eat at all. 9 out of 10 members of the population can die. And if it's something like an island, extinction is on the menu.
> What is a company like mine meant to do here to counter this problem?

What is hard about mailing everyone a hardware key? I honestly don't see the problem. It's not like you need to track it or anything, people can even use their own hardware keys.

1. Mail everyone a hardware key, or tell them if they already have one of their own they can just use that.

2. Tell them to enroll at https://landing.google.com/advancedprotection/

> Google Workspace actually lacks a lot of granular security features, something I wish they did better.

Totally agree with that one. Last time I checked you couldn't enforce that all employees use Advanced Protection in a Google Workspace account. However, you can still get this info (enabled or disabled) as a column in the Workspace Admin console so you can report on people who don't have it enabled. I'm guessing there is also probably a way to alert if it is disabled.
Perhaps they had in mind "bane".
California's "dealing with the problems" seems like a lot of shortsighted non-sustainable policy. Parts of CA are burning right now. At this point they've been bragging about maybe not having to go back to rolling blackouts. Reliably providing even the most basic services like water and power is such an astonishingly low bar that only in the poorest developing nations should that even be in question yet here we are. Long term, I don't see Texas or California holding up very well to climate change.
Also, that nuclear plant is going offline in about a year [https://www.pge.com/en_US/safety/how-the-system-works/diablo...]
This looks really cool!

I wrote a few applications using both the official Kubernetes client and the asyncio variant from Tomasz. Both have the same problems to me (that you exposed on the comparison page):

The documentation is really terrible (it's even non-existent for kubernetes-asyncio). For the official client, it's hidden deep inside the repository, across hundreds of files (592 at the moment); half the link cross doc don't work, there are rendering issues, etc. It's really a gigantic mess.

The API is extremely verbose, directly the underlying Kubernetes API exposed to Python. It gets the job done and it's better than shell script, but the verbosity + the total lack of a decent documentation (cf. above) makes it hard to use and see what you can do with it. Most of the time, you have to fire the REPL and try a bunch of calls until it makes sense. I like that most of the responses are proper objects, but they display as dict in the REPL and of course, the responses format are not documented in the doc :)

Last but not least: they both lack support for fancy authentication mechanism. We go to Kubernetes through a fancy proxy that require specific TLS settings + an external exec plugin to get the credentials.
The official Kubernetes client should have the right support (for what we need at least) in the next major version but the asyncio variant not yet (I made a PR to fix this, but this requires a new version of aiohttp which is not released yet...) Both clients are very similar for the autogenerated code, but also subtly different for all the things around so you can't really expect 100% that what works on one will work on the other.

I'm not sure how kr8s works with this fancy auth system, but at least for the first 2 points, it seems like a huge win, I'll give it a try!
I know what I'll do is, I'll capitulate to the fact that there is nothing by way of relevance favoring my side and I have exhausted all attempts at misdirection, but I'll simply tell them that they are the ones capitulating. That should work.
Coincidentally I was listening to this song as I read your comment:

https://www.youtube.com/watch?v=FtddIM6wfvs
It’s all in good fun. Good reference!
>I'm unsure if you understood what i was talking about. outdoor ethernet requires a crimper, otherwise you can't guarantee water-resistance.

No, it does not. I'm fairly sure you do not deal with outdoor networking of any kind, or you'd be more familiar with the myriad of solutions to this. The most basic of which are feeding a terminated cable through a tight rubber gasket of some kind, which then fits around the 8P8C port in some way, and is installed facing up. That is typically plenty for outdoor survivability short of full submersion, including driving rain storms, complete coverage in snow etc. Sometimes dielectric grease or the like may be added if it's going to be buried underground too. Like, this is a solved problem, for ages. Cheap PtP devices, outdoor WAPs, outdoor switches, ethernet extenders etc all handle this just fine. All of them use preterminated cables (of course you can make your own).

>the power and data are separate - unless you mean the cable going to the dish

Of course I meant the cable going to the terminal (dish). I want that in at least a pro/business terminal to have an option to use SFP directly so I can have the data go direct to fiber and power be separate, which as well as allowing far more range to the router has the added advantage of eliminating any surge or induced current considerations.

>I haven't tried to "dumb WAN" the starlink because it's outside the scope of my use. I don't even see the point of getting rid of the NAT at that spot, because it's still NAT upstream, and you're gunna need NAT on your network anyway, probably. I had this issue with 4g/LTE CPE, too. Once something goes CGNAT, there's no reason to use your own equipment, as it's getting a private address anyhow, and now you're approaching quadruple NAT territory.

I'd politely suggest you perhaps not be quite so confident about things you don't really use or understand.
I would say it's Kafkaesque, but charging money for access to the legal text seems to take it a step further.
Seems kind of "backwards"? Why not put more effort into Fleet so that they can eventually sunset all the language-specific IDEs and have one product to support?

A big part of why I use VSCode over JetBrains stuff is that I only have to deal with one application for all my things.
Was anyone else amused by the mythological significance? In Greek mythos, Pegasus spawned out of the blood of Medusa.
Google is cutting hundreds of jobs in its recruiting organization
J-Core, RiscV and Open Source GPS
I've heard it said that Newton was one of very few (maybe the only?) Wardens to not pardon a single counterfeiter and stay their execution.
The paid version isn't exempt from this extra fee though. :)
A quick note on Quiet's capacity limits: the 30-100 number is very conservative and not an intrinsic limit of the approach we're taking.

I'm pretty confident that we can get Quiet to the point where the practical limit of participation in any Quiet channel is storage, relative to the amount of message history that a particular community wants to hang on to for a particular channel.

It wouldn't be crazy difficult to shard storage either. Once we do, a community could store a lot of data by marshaling many nodes with low or uncorrelated downtime. Paying for storage is also an option.
> I can calculate the movement of the stars, but not the madness of men

Many will find this relatable.
It seems like your describing more of a problem with the system between the screen and the chair.

e.g. 'inability to account for new desired behaviors' for presumably a core business system, that the business relies on, would almost certainly imply that.

As to your question, it doesn't really matter what my background is, I could be a ballet dancer and would still be able to reason out how businesses operate and how software historically has integrated. It's not some big secret.
For me personally it’s not bugs as such. Bugs usually do get fixed fairly quickly (though something like this making it into a release candidate is concerning).

It’s half-baked features that don’t get revisited for years. We all know the new System Settings sucks; Sonoma hasn’t meaningfully improved it. The Notification Centre redesign introduced 3 (?) years ago is so much worse than the old design, but it hasn’t been touched since. Disk Utility is a shadow of its former self.

macOS is an established operating system, I would prefer them leave perfectly good features alone unless they can actually make them better.
No it can't.

The rouge javascript or keylogger would just steal the totp code, prevent the form submission, and submit its own form on the malicious person's server.

Not to mention if your threat model includes attacker has hacked the server and added javascript, why doesn't the attacker just take over the server directly?

If the attacker installed a keylogger why dont they just install software to steal your session cookies?

This threat model doesn't make sense. It assumes a powerful attacker doing the hard attack and totally ignoring the trivially easy one.
Mechanisms like this exist, but they probably aren't integrated into whatever system you are using, and delays which involve an approval workflow add a lot of overhead.

In most cases the engineering time is better spent pursuing phishing resistant MFA like FIDO2. Admin/Operations time is better spent ensuring that RBAC is as tight as possible along with separate admin vs user accounts.
yes! i'm curious how much of what they did would be possible on mobile.
The True Physics of Space Battles
Issues in programming language design: an overview (1975) [pdf]
There are a million worse problems that could be regulated first. Why do so many things have sugar added in products at the supermarket, for example. Regulating sugar which lacks in nutrition would only be a net benefit for society, yet I think most people agree it would be bad to tell food companies how to make their products.
In general because the tragedy of the commons is solved by one group pointing a gun at everyone else. Nobody wants that, but at the end of the day that's what we're going to get if we like it or not.

The longer we wait, the more people are going to get shot by that gun.
Pasting my comment from another post on this news:

Seems these Nazca aliens have already been debunked two years ago as a re-arrangement of human and animal bones. If you can ignore the comedy skits, the video below points out all the inconsistencies.

https://youtu.be/-DmDHF6jN9A
The rich won't be happy until everyone else is living in favelas and subjected to debt peonage.
It does have minimal marginal cost, as long as you live in the right place on earth, without many other customers next to you.

Once you exceed, fairly limited amount of people that can use it one cell, you need to grow massively your fixed cost, as you need to grow the whole constellation or just won't be able to grow.

Time will tell if that will add up. I don't think it's obvious it will.
> Even 144hz sounds pointless to me, since you need a very good eye notice the difference between 30 and 60hz.

This is false by demonstration. I can tell the difference between 60hz and 144hz. The idea that you wouldn't be able to tell the difference between 30hz and 60hz is preposterous.
its obviously not a 100% garantuee, but its about as good as anyone can reasonably do
I'm not sure your comment makes sense in the context of the article and my reply. The whole point is that batteries are expensive.
>with its combustion chamber and nozzle measuring less than 1mm

Judging by the image its more like 1cm.
So do these filters actually work then?
Really, really appreciate you sending this! I will dig in but this seems to be exactly what I was asking about/looking for. I'm always really curious why the big native cloud platforms don't support this kind of authentication natively.
His accomplishments are enormous - showing how to make electric cars at a profit, and cutting the cost of space launches by 90%. And now Starlink, too.

Standing up for free speech includes standing up for the right to express ideas you don't like. I'm sure he'll allow you to post your opinions, too.

Suppressing free speech is the first step towards tyranny.
They're sociopathic, genocidal vampires.
RPG in a Box: A grid-based, voxel-style game engine built on Godot
Or maybe they're not shitting on anyone in particular and just trying to warn their MacOS users about a security issue?