skysight-inc/HackerNews huggingface dataset:
It's not quite the same, but in Google Maps you can switch the language of the app itself. I use this to get navigation not butchering street names into unrecognisability while the rest of my phone is English. It does do the whole navigation in that language though, so you do need to be able to understand it to a reasonable degree, and it won't switch based on places (so it'll then mess up when I'm somewhere with English names.)
This is a nice list of could've, should've, would've's. But you'd have to dig deeper to get to the core.

Why did these things happen (or not happen)? Insufficient training? Insufficient processes? Were changes being reviewed and accepted by people who didn't really understand the changes, for expediency? Were there alerts but they were lost in the noise of thousands of bogus alerts people had learned to ignore? Was the lack of segmentation a known issue but allowed because it made some things easier? Were the credentials stored on NFS because they simply hadn't setup a more appropriate system yet and that was considered low-priority? Were business priorities getting in the way of technical priorities such that known issues were backlogged?

It's fairly easy to make a bullet list of things that should (or shouldn't) be done. It's a bit more difficult to figure out why, in a specific organization, those things aren't (or are) being done. Even if/when people might know that they should/shouldn't.

The surface level mistakes are interesting. The deeper organizational causes of those mistakes would be interesting. Solving those things at a higher systemic/organizational level can reduce the whack-a-mole nature of individual mistakes.
that's just guessing. the point could also sit. what you mean to say is that it is still there. how is not relevant to your argument.
Ha, additionally I wonder if that will happen before Google Maps will be good enough that I won't second-guess it.
There's no such thing as an incompetent politician. They may be technically illiterate, but their personal goal is to maintain power, and a good part of the time they don't spend telling bullshit to the public is spent asking their experts in a given field (IT in this context) to find ways to do something that would increase their power and also can be advertised as good for the people by telling more bullshit.
Frankly I can't tell you anyone off the top of my mind, since this isn't a subject I find interesting enough to bother keeping a list. There also aren't that many "celebrities" that I'm aware of.

I guess you're doubting that I would've said what I said before the allegations started. There's nothing you I can do prove anything to you.
Elixir: a relatively thin layer around Erlang that you eventually have to learn anyway.

Elixir is sort of a gateway drug to Erlang, sooner or later you want the real thing.
But you can do it and it works. And because it's about taking quick notes, it's not really about the beauty of the layout or layout shifts, isn't it?
You are right, as a civilisation we have no idea how to do risk assessment, and often when sh*t hits the fan, it is something we can't do anything about. At the current rate it is better to NOT do any risk analysis, and just be prepared for the worse case scenario.
I was struck while recently reading David Grann's "The Wager" by how little people understood scurvy at the time. Grann writes about how some doctors believed it to be a reaction of the body to being away from solid land for too long, and attempted a treatment by burying patients up to their necks in soil.
Most of these crimes hardly require talent. It's just social engineering the tech illiterates or even the unsuspecting literates.

> Another finding in the report was that of all reported cyber crimes in India, almost half (47.25 percent) involved Unified Payments Interface (UPI) fraud. Debit, credit card and sim swap fraud came in a distant second place with 11.27 percent. Overall, financially motivated crime accounted for 77.41 percent of incidents.

Talented criminals are rare. And those talents mostly go behind bars while the above criminals loom at large.
> There's no overarching devious plan to enslave us all, here. It's just classic honest-to-goodness incompetence and disinterest.

At least the overarching-plan theory has a boogie man to attack. This is preferable to the alternative of nobody being directly at the helm and all these transgressions are done for a purely political game of chess that awards the person responsible with marginally more power than they had prior.

Honestly, that reality terrifies me more than some secretive cabal.
There's the reputation loss in the eyes of the international community, shouldn't the authorities have some interest in not letting India be perceived as a country that allows theft and organized crime?
I've heard more than one person completely honestly say "I hate the Tories, but not as much as I hate labour". There is some national belief that labour would destroy the country(even more than the Tories do) so in response labour is slowly morphing into Tory Party 2 just to get some voters over. Even if they win the upcoming election(and I really doubt that) I don't think the overall policy would be much different to what we have now.
> It would be like a report that says "25% of financial crime in the US comes from New York City"

Boy do I have the project for you: https://thenewinquiry.com/white-collar-crime-risk-zones/
There's a whole collection of Software Folklore over here
https://beza1e1.tuxen.de/lore/

Relevant thread: https://news.ycombinator.com/item?id=23005140
What are we going to do? This went through with no vote that I am aware of.

I emailed my MP a while back when I first heard of this, I'll let you know when she gets back to me.

Short of a 1-man protest (is protesting still legal?) I got nothing.
I wrote to my MP about this and got a response.

They agreed with me that it is "important to protect users' freedom of expression and personal privacy".

They "do not believe it is right for encrypted messages to become decrypted. There must be a balance between our fundamental right to privacy and keeping people safe online, which raises difficult questions for platforms such as WhatsApp".

But they "do not believe that the legislation impacting private messaging will damage this encryption, as a variety of technologies are emerging that could allow for scanning on issues such as child sexual abuse material while retaining the privacy benefits afforded by end-to-end encryption".

They do note however that having Ofcom be the regulator and monitor isn't right, which seems to have been a bit under reported to my knowledge.

Funnily enough, they did not vote on this matter and I shall be finding out why.
I maintain erlang libraries. I contributed to OTP. I am from Elixir.

I cannot agree. Erlang is a pita to with. From the lackluster test libraries, the lack of module aliasing, the atrocious UX of parse transform, and so much more.

Erlang bring nearly nothing that Elixir cannot do and the UX of elixir is by far better.

And I am not talking of syntax here.
Wouldn't the successor of XML be XMM?
People care about events when the outcomes of those events have consequences either for the company or better still those in charge of the company.

The reality is that despite Equifax showing a blatant disregard for the security of the data they have on people, the repercussions of this breach were trivial to them and their senior people.

So yes, I do agree that there is at least one company out there, Equifax, who does not care about PPI leaking from their systems.
Isn't it quite standard to use hashing for resources? It's also possible to append a query key (/style.css?hash=abcde123) it's also possible to use the last modified timestamp instead of a hash. Computing hashes on every request is slow, just reading timestamps is usually very fast. It's important though to mark the HTML resources as no-cache or with a very short cache time, otherwise some users may see broken or old content.
Article 1 of the Constitution states that “India, that is Bharat, shall be a Union of States.” It's crucial to emphasise that Article 1 of the Constitution recognises both 'India' and 'Bharat' as official names for the country.[1]

[1]: https://www.indiatoday.in/law-today/story/india-or-bharat-re...
It's true that there's no "restrict" inthe C++ standard, however all the major C++ compilers have extensions for it ("__restrict__") and have had for a long time.
>Ivermectin isn’t an anti-viral

you don't know what you are talking about. from the NIH:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7539925/

Ivermectin is an FDA-approved broad-spectrum antiparasitic agent with demonstrated antiviral activity against a number of DNA and RNA viruses, including severe acute respiratory syndrome coronavirus 2 (SARS-CoV-2).
It’s a good start but no guarantee. If you have a sequential chain of requests, for whatever reason, the number of round trips is determined by business logic. If you have anything like say a microservice/API request preceding another, you’ll see more round trips. Given the leftpad-as-a-service trend we’re seeing today, I would expect that to be quite common.
The repository I shared is very opinionated and I will decide what goes in or not (a benevolent dictatorship). I want to make it easy for me to maintain, and others to use/fork if they want.

You could share them publicly without having the burden of replying to issues/PRs etc. But I get you.
It would be interesting to hear about a comparison between the two - though it sounds like you aren't as skilled in Rust?
I have a 2015 MBP with only 16GB ram that is my reliable and sturdy daily workhorse. Curious if your storage is hdd and your OS is windows?
I’m taking a cybersecurity course right now and this article is timely and informative. I’m a programmer with a lot of Java and database experience, but not really knowledgeable about security practices.

Maybe security certification should be more of a requirement in hiring software engineers; I don’t recall it ever being mentioned in job listings.

Anyway, it got me wondering, how did devs get away with storing database credentials in a file on an NFS share? That’s sheer recklessness. As a regular procedure, an audit should include scanning all files for passwords, for example; run find-grep-dired or similar on every mount, every disk, every cloud instance etc. And, obviously, require regular password changes.

It should be assumed that the entire system is vulnerable, and hardening should be done regularly and rigorously. A company as big as Equifax (or Target) should have a dedicated team whose job it is to constantly probe and audit. Since, after all, the black hats are constantly probing, too.
When I signed up for Hetzner they asked for a national ID/passport OR pay a non-refundable €20 fee which gets you accepted immediately. I’m not sure what their risk assessment process looks like now.
Device manufacturers can provide support for kernel used by their products themselves, pay some distro vendor to do it for them or contract maintainers directly. You expect Linux or Greg to do it for free because EU says so or what?
Microsoft dropped 16 bit support on 64 bit machines, but that was becomes 16 bit support on 32 bit was already using emulation/virtualisation, and so did 32 bit on 64 bit. Emulating a 16 bit emulator inside the 32 bit emulator would be too much, even for Microsoft.

Microsoft does drop backwards compatibility sometimes, usually because the backwards compatibility layer leaves a huge security risk.
I'm reluctant to install an addon that has access to all my web browsing for this.
Just for fun:

(servers
;; lispy comment
((name alpha) (ip 10.0.0.0) (role backend)
(notes "very
large multiline
string")
((name beta) (ip 10.0.0.1 10.0.0.2) (role frontend))
)
During registration you may get the opportunity to pay 20€ instead of uploading your ID card. The 20€ counts as account balance BTW.
For static assets also query keys can be used (/image.webp?hash=abcd). Most web servers just ignore everything after the question mark for static files and browsers use the full URL as cache key.
Meanwhile, a British MP chairing a media committee thinks it's appropriate to write to content platforms to suggest that they demonetise people they don't like: https://twitter.com/rumblevideo/status/1704584929026216118
That is who you sue. The people who did not bother to set up road closed or bridge out signs / barricades.
> Bespoke, patient-specific, genomic treatments: they'll ask how deep are your pockets.

In Australia?
I think you've got the "this is a joke" bit referencing the wrong part of your post.
But consumer cpus use less power and having a lot of them means you can be granular with power usage and use a lot less power. I would also challenge that using more power is not a problem if your energy sourcre is nuclear or renewable.
Nothing irritates me more than two for profit companies (Equifax and Experian) who have a license to print money by collecting my data without my explicit permission. Even with the introduction of GDPR and all the new consumer protection this brought about, I cannot ask them to delete all of my data.

They should not exist, or if they must exist they should be not for profit. It's a total scam.
Plenty of us like painting and programming. Your brush is way too broad man.
WinE = Windows Emulator, unless someone changed the acronym since I was playing with WinE in the 1990's.
The trend is sadly not reversing fast enough. Apple already discontinued their line of slightly too big phones (mini series), and now they only sell oversized phablets. I might not have viable iOS-based hardware options when I upgrade in 2-3 years, and I'm not comfortable switching to an operating system made by an adtech company. I do hope they go back to smaller sizes before then. Kind of baffling to me how Apple otherwise puts a lot of effort into accessibility, but their main line of phones are awkward and uncomfortable to hold even for a fully able-bodied person with average size hands.
If you don't trust the data you're supposed to use SafeConstructor.

It's like blaming the browser vendor for an XSS vulnerability rather than the backend implementation not using HtmlEncode.
I don't really understand the relevance of Jimmy Savile here.
US Government Bars Wuhan Institute From US Funding for Next 10 Years [pdf]
Even places that aren't, the water out of the faucet is fairly grim. Heavily chlorinated and unpleasant. It's no wonder that they all drink filtered, or bottled water.

It's one of those things I forget about each time I visit and drink from the tap only to remember that I can't do that most places here after the first sip.
One of the best ways is to look at the HaveIBeenPwned service https://haveibeenpwned.com/ - Troy Hunt goes around spending effort finding these things, so whether he has found it is a reasonable indication of whether it is out there. There's a list of the breaches he has included at http://feeds.feedburner.com/HaveIBeenPwnedLatestBreaches

Edit - sorry, a better list of breaches is at https://haveibeenpwned.com/PwnedWebsites
I doubt the Indian Govt doesn’t care about this. But it’s likely that the overworked policeman would rather solve an extra murder case than go after a scam office. Iirc there have been arrests made in the past by the Kolkata police, but it’s probably a whack-a-mole x inadequate resource problem.
> I want to work with the best engineers

Sorry but wrong mindset. You will not learn the most when you are surrounded and mentored by "yoda class" devs. The sad reality of the tech sector that this happens very rarely - not many teams have this growth attitude, everyone just wants to hire seniors who instantly have the best answers. You can learn just as well by surrounded by and inspiring juniors when solving problems. With any luck they will rightfully question many things you take for granted.
Toyota new strategy "If Tesla is doing it, copy it".
I also just gave it a go. I live in Amsterdam where biking is pretty much the dominant mode, and it wasn't great. I told it to take me to a place in the north of the city (over a river), and it gave me directions over a bridge which is about a 14km trip rather than via the free ferry which makes it more like 4km. It also oddly doesn't optimise to the route I usually take (for the segment that makes sense) which is both shorter and quieter. Perhaps it tries to minimise corners, but on this route it doesn't make sense to.

OSMand both has the "shortcut" and knows about the ferry.
I expect any law that defines a "womb" as being inside a woman will change once artificial wombs become possible.
What's a bit weird is that you can leave out the whitespace between the tokens. I'm not familiar with PostgreSQL, but I'm pretty sure "selectcount(*)fromtable" is not valid (although the parser could conceivably say "Ok, I have seen the token select, whatever comes after it must be the next token" - this would slow down parsing, but is theoretically possible)?
Rumble rejects MP's 'disturbing' letter over income
Dame Caroline Dinenage, UK Minister of State for Digital and Culture has petitioned social media companies including Rumble, TikTok, Facebook, X, the BBC and Channel 4 to suspend Russell Brand from the platforms after a Channel 4 programme made accusations of sexual assault against him.

He denies these accusations and they have not been tested in a court of law. Rumble have declined.
Look at how Jeremy Clarkson reacted with anger that Megan had complaints about the royal family. He was absolutely feverish, animalistic
Isn’t this what the Civil Infrastructure Platform (CIP) initiative [0] was also proposing? Maintenance of Linux kernels on the 10+ year horizon aimed at industrial use cases. Has backing from Toshiba, Hitachi, Bosch, Siemens, Renesas, etc, though a marked lack of chip vendors as members. Not really sure how well it is going though.

[0] https://wiki.linuxfoundation.org/civilinfrastructureplatform...
While I agree with the sentiment, there are two superpowers in the mix for me (pun intended):

1. Erlang / BEAM itself as the runtim with lots of powerful capabilities (what you probably are talking about) - you need to know this stuff at some point to fully leverage the technology

2. Elixir the language (+ excellent modern tooling) ontop, which really helps to significantly speed up productivity/average code quality - I don't like to over-reductionist approach here, DX is also an important thing to consider instead of the raw foundation
Thanks, I run HomeBridge on a Pi so I might try this if Hue go through with their plan.
This happens in any African country, whatever the colonizer. For instance, Nigeria is hardly dominated by foreign powers, yet it is a prime case of crony capitalism.
"...In summary, the NIH determined that WIV may have conducted an experiment yielding a level of viral activity which was greater than permitted under the terms of the grant. The NIH gave WIV several opportunities to address and/or rebut the NIH determination, but WIV failed to do so. WIV conducted an experiment that violated the terms of the grant regarding viral activity, which possibly did lead or could lead to health issues or other unacceptable outcomes..."
> Kind of crazy and insanely trusting.

The reverse is always surprising to me: as if blocking a credit card constitutes the ending of a contract.

In Europe, a contract isn't entered or broken by making or blocking payment. Companies will very succesfully have their contracts enforced, with any extra costs billed to you. Apart from leaving the country, you're not going to get away with non-payment.
Spot on, I mean who wants 6 year LTS support? Must be big old slow enterprises and possibly banks, government agencies, so pay up.
Interesting that he uses.some ext service for caching the images.

Doesn't this creates a security issue with ext content?

Shouldn't this easy to Selfhost through some nginx config?

Like nginx do a proxy pass upstream and cache and return a cache header? The only thing you need to do is either use a specific path or do the same as this service does with a URL at the end.

Of course denying random hosts l.

Should be doable in a few minutes
No you are right, but my point was that it was an unnecessary observation in my opinion. Pointing out our choice on EU membership brought zero additional discussion to the points they made. Just like our little conversation now :)
Paperback uses the AEAD-and-SSS-the-key construction, but that's more to do with the properties such a scheme gives you (it allows more flexibility with how you distribute the secret -- you can keep the main document with a lawyer and distribute the shards so even if the shard holders betray you they don't have access to the original document). You also want to have protections against fake-shard attacks (which allow an attacker with a real shard to withhold the secret from others during recovery and then keep the recovery secret to themselves), and so you need to make use of traditional cryptography anyway by signing shards to detect fakes.

To answer your question though, it primarily depends on the SSS construction and how big the quorum (number of shards needed for reconstruction, not the total number of shards created) is.

Most constructions use Galios Fields and thus chunk the input and produce a new polynomial for each chunk -- the vast majority use GF(2^8) which means its per-byte. Paperback uses GF(2^32) to get 4-byte chunks so that the x-value used is more collision-resistant. I suspect for large documents GF(2^32) will be about 4x faster because Galois Field operations are very fast (which is why most tools use them over prime fields) but using 4-byte chunks reduces the number of operations needed by 4x. I considered going for GF(2^64) to get 8-byte chunks but doing so requires 128-bit integers in some operations. You can also process the chunks in parallel if needed. While very large documents would take longer, the recovery operation is pretty efficient and recovery time should scale linearly. The main scaling issue with SSS is if you want to increase the quorum size -- most of the algorithms are at least quadratic with respect to the quorum size if not worse.

If you implement it the way described in the original paper (using a prime field) then it mostly depends on the efficiency of the bignum library you are using -- though you probably want a bignum library that supports doing operations in a finite field because doing large multiplications and then calculating the modulus afterwards is a lot of wasted work and memory. I suspect Galios Fields are far more efficient at any size.

For paperback's SSS implementation, I've written some preliminary benchmarks and it seems you can easily do secret recoveries at a rate of at least 75 KiB/s depending on the quorum size (32-person quorums are around 75 KiB/s while 5-person quorums can run as fast as 900 KiB/s). So, for reasonably-sized quorums you can easily have several-megabyte sized documents with sub-minute recovery times. Of course, doing AEAD and sharding the key is still much faster for larger documents (ChaCha20-Poly1305 can run at ~2GB/s on my machine according to "openssl speed"). But it's not necessary.
Perhaps class?

If software developer talent is distributed across all classes of society but only the upper classes have access to professional or well paid technical jobs, there will be a surplus of low class tech workers shut out of the legal job market. So they resort to crime.
This might be a bit irrelevant but,

my professor who teaches computer programming (who previously worked as a nuclear physicist) loved mentioning Fortran whenever possible.

He truly enjoy the language and believes it is well suited for heavy computation. He said its used a lot for weather forecasting.

He is quite old now so I don’t know how true it is today, but he made me more interested in Fortran and I might give it a shot instead of C sometime soon.
Honestly I think it's worse than that. Their playbook is just that last one.

- Profit

Everything else is a mere side effect of that rather than a plan to end up there.

And we're worried about AI alignment, lol. Bring on the grey goo.