skysight-inc/HackerNews huggingface dataset:
First, Okta got hacked and that hack allowed CloudFlare to get hacked. That is bad. Second, one of Okta’s other customers reported the hack and Okta either ignored the report, or investigated the report and did not find the hack. That is not good. Third, Cloud Flare’s response was professional. They asked a company providing a very important service to improve because that company’s product and practices endangered CloudFlare.

If Okta does not want its customers to publically complain about its actions, Okta needs to improve and do better. In particular, if someone says they have been hacked, listen to them and keep digging until you find the problem.
Interesting and I can see some of the benefits, particularly in preventing DNS controllers from going to other CAs and making new keys, but... this all seems like a weird run-around for the MITM part.

Couldn't you exchange public keys with LetsEncrypt (in the web UI) and encrypt the response so you can't be MITMed? Why is http even an issue?
I like both Python and Ruby and aesthetically Ruby is better and I can see why people are happier writing on Ruby.

But to me happiness comes from achieving the ends — eg training a model, deploying code that impacts millions of people. I’ve done that with Python and I can honestly say I couldn’t have done the same with Ruby because the Ruby ecosystem and tooling didn’t support such impact size in my (and many similar) domains.

I don’t think it’s wrong to tell younger folks to see th big picture and focus on impact before personal preference. Everyone can choose their own path of course but I’ve generally found that focusing on impact has led me to take on more meaningful projects.
The latter isn't cronyism. There isn't some anti-developer who is lining politicians' pockets with money created by not developing. In fact, what we're seeing is Democratic state politicians in these blue states making laws that limit NIMBYism like SB 35, against the wishes of local governments voted in by local NIMBYs.
There are a bunch of considerations. As resolution and color depth goes up it becomes harder to throw a lot of graphical detail on the screen through traditional illustration, so games that went down that route increasingly became flat and cartoonish, while 3D games could be filled with textures, lights and "greeble" architecture. It was also a way to enforce style consistency. Lucasarts didn't have "art direction" as a role until DOTT, and their earlier games show a lot of style drift between assets. Early 3D enforced a style through the constraints - often not a good one, but definitely something that could look consistent just through the model/texture/light process separation.

The biggest one is actually animation. Animation gets expensive as you add more detail, and when you add resolution, you discover a need to add more frames of animation to make it still look smooth, so your art costs can explode. The use of 3D here is motivated by having camera-independent animation, and being able to use it for every minor environmental effect: think of every Myst-style game where you pull levers and push buttons and open doors. Character animation in early 3D was bad, but it was also "enough" to look representative, so it ended up beating traditional or live action approaches.
Someone really ought to design a new text terminal protocol with a strict binary separation between data and control information and eliminate the regrettable scourge of escape sequences forever. Then using a command like "cat" to output a binary data to the screen would cause no unfortunate side effects under any conditions, a program would have to use a different interface to control the terminal, even to move the cursor from one place to another or to clear the screen. A proper terminal should not even process backspace characters unless they arrive via a control channel rather than the data channel, let alone process all sorts of other more dangerous control sequences.
I've just vouched your comment. Not sure why it was removed, because you're right, games that are primarily immersive sims aren't being made as much by AAA studios now. Some mechanics are integrated into open world games to varying degrees (you could argue that BotW/TotK take so much inspiration from them that they might count, but to many people a replayable mission-based format is an essential part that is missing in them). There are some indies in this space but they're rare since the concept is difficult to develop around in the first place, given how you have to account for so many different edge cases and routes that the player can take.
A defense presentation is very different to one you would deliver to a seminar audience. The panel want to confirm that you have made a significant contribution to the field. They know the field and are unlikely to be swayed by video of robots doing their tricks.

A good format might be to present a 5 minute segment to provide an overview of what you have worked on. Then the remainder should focus on reinforcing the contributions that your dissertation also presents. Departing too far from your dissertation might raise more questions which you will then need to defuse during the interrogation.

Obviously if your contribution includes something that can be further evidenced by a suitable short video segment, then that will be valuable. For example, if you have developed some algorithm which leads to faster, smoother, etc operations under some adverse condition, then demonstrating it in addition to explaining the theory behind it is of value.

BTW, most of us only ever have to defend one PhD.
At what point do we make a language that’s syntactically identical to Python, but designed from the ground up to have better performance and threading support and just have projects that want performance + Python syntax to that, because clearly the current Python is flailing at multiple goals at once and achieving none of them.
This looks to be a lift of the Ruby MRI interpreter via emscripten and targeted at non-browser runtimes, using linear memory rather than GC. Would be cool to see a non-emscripten Ruby for WASM GC.
I think it looks like a worked core, because of the flat bottom which would be the striking platform (upside down). The flat striking platform is made first, and then flakes are struck from the edge working around the core. This doesn’t rule out the core being made into a tool itself but many are discarded.
Python's support for run-time version/flag/setting detection isn't great for this kind of thing either. With Perl, for example, you get a BEGIN {} block that is run before it tries to parse the script...so you can detect and shim, etc.

Python bombs before you can gain any control, because it parses the whole file. So you can separate things into modules to get around that, but it's not great when you want a simple one-file script.
Gsync basically doesn't matter if you're fine with disabling vsync, and at high FPS the tearing is almost invisible.
Loved this game as a 10yo
So, if I rent server in those services, it all potentially can be compromised and there is no way to make sure things are secure?..
Do you mean implicit parallelism? Because what we have now is typically explicit paralellism. Creating a thread or forking a subprocess is explicit parallelism, the programmer chooses that option. A function like `map` that can utilize a parallel or sequential implementation depending on circumstances the runtime or compiler are aware of without direct input from the programmer would be implicit parallelism. If the `map` function takes an execution context that signifies parallel or sequential execution then we're back to explicit.
Connect with AI clones of your favourite creators
What's the point of higher refresh rates when even the best LCDs have motion issues? You forget how bad the situation is until you see a CRT with perfect motion
Same! My early childhood computer / tech introductions, all ran on a 286
No, there is no reason to jump to such extremes.
Business relationships with the venues. They are equally to blame.
So SSL certificates are completely unreliable; we should only wait until Russian or Chinese comrades find a good use for this attack (e.g. temporary redirecting Western traffic using BGP to validate a Let's Encrypt's cert for Western site).
Is a divinity, so either is a stylized image of "perfection" (whatever it meant in their cultural context); or they tried deliberately to depict the most "non sexually exciting" image possible, while keeping the symbolic aspects
Sampling in Video Game Music
"wouldn't it be funny if..."
Could this be a blue pill attack? A vulnerability in the xmpp server exploited to inject a rootkit, which then hides itself inside the kernel?

Or creates network/pid namespaces and puts you in them, while leaving the mitm server in the original one?

If so, the mitm could be on the same host, and wouldn't need the cooperation of the hosting provider.

I'm not sure how to check for either of these without restarting (which the admin does not seem to want to do, as it is a live service).

https://en.wikipedia.org/wiki/Blue_Pill_(software)
? did you not read the article?
Thank you! That is a great point. I will keep this in mind.
what? nothing to do with Let's Encrypt, if someone gets to large-scale MITM your traffic then they can get anyone to issue a DV cert.
This is the _second_ time this has happened, and it's clear Octa hasn't learned any lessons. So Cloudflare is right to call them out, and Okta should be embarrassed. What surprised me about this post is that they didn't say they were dropping them. Okta is a vulnerability to any organization.
Powerful plasma 'blades' could slice entire stars in half, new paper suggests
I mean, OpenMP dates back to 1997 (1998 for C and C++). Apple, however, has never supported it for what can only be selfish reasons (particularly since Clang has a quite good implementation provided by Intel, which can easily be installed on a Mac if you want). GCD came a decade later.

For basic parallelism, nothing beats OpenMP for ease of adapting existing code (often a single "#pragma omp parallel for" directive is enough). Even for more complex parallelism, particularly where per-thread resources need to be managed, OpenMP still provides a much simpler programming model than the alternatives.
In my experience, no. I keep getting calls from my elderly dad, but the notification level can be dialed up or down - in my case, I get very few spam notifications. Put it on DND and it's almost zero.

If you happen to have full notifications on for slack/Facebook/etc yeah it can get annoying - but you can't really immerse yourself in it.

I think of the watch as a pure comms/notification device whereas the "phone" has become a full-on handheld computer.
Grant Kirkhope: Donkey Kong 64, Banjo-Kazooie, Mario+Rabbids, GE 007 [video]
First, you are assuming Okta is worse than any other vender. It is very very very possible that other authentication venders are either just as bad or even worse. Remember, no one knows how to build an unhackable computer, service, or system.

Second, moving venders is VERY hard. It can take years to do it. I have worked at another cloud provider and moving from an old system to a new one is a huge undertaking. You do not just say, “See you, I am out of here.”. It can take years of work and planning.

Third, you do not know what CloudFlare is doing internally. My guess is they have already spoken to Okta several times about the problems they have had. At this point, CloudFlare may actually be moving off Okta or thinking about moving off of Okta.
> Doesn't that use a different deletion mechanism?

Generally not. There is a separate process called "oversight" [1] which behaves the way you're describing, but it can only be invoked by a very small number of privileged users, and is only used in extreme cases.

[1]: https://meta.wikimedia.org/wiki/Oversight_policy
No because traffic redirection occured in provider's infrastructure, not on a server.
The point of implication is to say whether, in case P is true, that Q is true as well. If P is false, then the implication is always true.

So it’s !P || Q. Or P=>Q as the author proposes.

If(bValidate => IsValid()) { /* runs if either validation was unnecessary or passed */ }

And that would be equivalent to (!bValidate || IsValid()).
The shells on the Apple II and on Commodore PCs were BASIC interpreters. So it was really easy to get started programming even without knowing it.
Well maybe I'm a bumpkin but seems to be the fix is the truth, and if the truth ain't clear there's no reason you can't have explanations or explain claims repeated elsewhere aren't evident in something like source materials. It isn't like you got a floppy disk and have to cram an encyclopedia on it.

Simple enough fix to my mind. If them "dragons", and I like that image there I think it fits, pull bullshit like that you just remove them. Which you can now easily do because whether or not Colt claimed something is a matter of truth that can be checked. In this case obviously not. Simplifies everything and gets people talking about the truth and how to best represent what's true, even if it's disputed, instead of having what's very clearly false with no hope of even clarifying "this appears to be a myth".
Forking Go means that you have to maintain a copy. That's a lot of work. Instead, the idea is to implement coroutine as a library and work toward an integration with the Go stblib.
While it focuses a bit more on pop-culture, a relevant comic on "the science news-cycle": https://phdcomics.com/comics/archive.php?comicid=1174
Live Nation, who own Ticketmaster, also own the venues and do the promotion for the tours.

They have a vertically integrated monopoly.
If I had to make a guess, the US military is dipping into ammunition reserves because they hope/expect to stop using 5.56mm and 7.62mm rounds with the rollout of the XM-7 and the XM-250 (which both fire 6.8mm)

https://en.wikipedia.org/wiki/Next_Generation_Squad_Weapon
https://en.wikipedia.org/wiki/XM7_rifle
https://en.wikipedia.org/wiki/XM250
Writing this post just because I'm so amazed to realize that my 8 years old digital ocean require so little efforts to manage and very affordable. I feel like more people deserve to know this, especially newer engineers who are taught to use managed cloud from day 1.
why do you keep making this incorrect claim?

it was a DV cert, and it was considered validated because someone was MITMing the traffic. that would have worked against any CA, nothing at all to do with Let's Encrypt.
Thanks! Some of the best stuff is hard to find. I just had ChatGPT analyze the code, describe the rules, and explain the cultural references in an OPS-5 program I wrote in that same AI class (from Jim Hendler), in the aftermath of the Morris Worm and Iran Contra Scandal.

https://www.donhopkins.com/home/archive/lisp/mylisp/ollie

https://chat.openai.com/share/bd1e4fc6-c1c1-499f-aca5-12cbd9...

The intruder was able to log into the professor's Sun 3/60 workstation from mimsy thanks to his .rhosts file! Things were so much simpler those days.

; host mimsy
(make file ^name passwd ^writable yes ^owner root ^host mimsy)
(make user ^user root ^password unknown ^host mimsy)
(make user ^user casper ^password unknown ^host mimsy)
(make rhosts ^user casper ^host mimsy
^ruser casper ^rhost tycho)
(make user ^user hendler ^password unknown ^host mimsy)
(make rhosts ^user hendler ^host mimsy
^ruser hendler ^rhost dormouse)

; host dormouse
(make user ^user root ^password unknown ^host dormouse)
(make user ^user sysdiag ^password none ^host dormouse)
(make user ^user hendler ^password unknown ^host dormouse)
(make rhosts ^user hendler ^host dormouse
^ruser hendler ^rhost mimsy)
But you can’t sue the cops, they have immunity.
Although this issue is why the next five or six years is basically China's only window for trying to seize Taiwan, and its leadership is not so crazy as to not know that, but possibly crazy enough to think that acting on it is a good idea while they can.
I haven't heard about Nessie in like 20 years. The smartphone killed folklore.
this is a very very silly take. Apple and Google have armies of lawyers who spend all day telling cops with subpoenas from all around the world to fuck off.
I know it's just a typo, but excemptions is an amusing portmanteau of exemptions and exceptions.
Maybe not (by some measures at least) but that is the point. They are still the largest food company in the world and one of the largest companies of any kind. Are you sure you aren't buying anything from them? They have a large number of brands and are always buying more. You can't always tell by looking at the package. Not that long ago a website error that mentioned Nestlé tipped me off that a supplement brand I was considering was owned by them and it turns out they now own several very popular supplement brands. I still think it is important to do your best to avoid such companies but it seems not enough people do this to have much effect even in the worst cases.
Murder hornets are Asian _giant_ hornets.

"Since its discovery in North America, the scientific literature and official government sources refer to this species by its established common name, Asian giant hornet, whilst the mainstream media have taken to using the nickname "murder hornet".[23][24][25] In July 2022, the Entomological Society of America stated that they will adopt the common name northern giant hornet for the species to avoid potentially discriminatory language, citing the rise in anti-Asian sentiment and hate crimes in the wake of the COVID-19 pandemic."
Recoding America: Why Government Is Failing in the Digital Age and How We Can Do Better by Jennifer Pahlka
Vietnam Forms Specialist Unit to Tackle Pirate Sites Linked to “Organized Crime”
> I’ve never seen anyone call Musk unhinged for kowtowing to China.

Neither did I.
GPU cores are not CPUs, otherwise we could run Linux and a shell on them. GPU core is much simpler than a CPU, that's why there can be so many of them on the die.
It varies so much between people (and age?). My dad has a very hard time telling 60hz and 120hz apart. Meanwhile to me 144hz and 240hz are trivial to tell apart, let alone 60 to 120.

One time my drivers for some reason reset my old 144hz monitor to 120hz, and that's still enough difference that it immediately felt weird when I logged into Valorant (so I began diagnosing the issue).
> If you have rewrote a file 999 times, there is 999 times copy of this file in the object storage. That's why it can be slow to clone a git repository.

Sort of. While Git’s canonical storage is indeed not diffs, it uses delta compression to, well, store diffs as a storage and transit optimization https://git-scm.com/book/en/v2/Git-Internals-Packfiles
So for example, if traffic to Google goes through a Huawei router somewhere, then Huawei can issue a Let's Encrypt certificate for Google, right? And any large national ISP can use MitM to issue fake certificates for any site hosted within that country?

To me it looks like SSL cert infra is completely compromised and unreliable.
So I assume DLT is a generic/more general term for blockchain technology.

There's this thing called Zooko's triangle (https://en.wikipedia.org/wiki/Zooko%27s_triangle), basically the premise that an identifier can only have two of the following properties: secure, decentralized, human-readable.

But a blockchain can actually be used to square this triangle and get all three. The original example of this is the Namecoin project, a fork of Bitcoin using a lightly modified Bitcoin codebase which can be used as a key-value store.

The idea is that a blockchain can be used to create a decentralized database mapping keys (domain names) to values (which can be things like IP addresses, but also PKI trust anchors, similar to DANE). Thus this can eliminate the need for a CA. You can also use it to map human-readable names to .onion addresses. There is also root-of-trust transparency built in since the contents of the database is public and any changes are also public. The right to change a key-value entry belongs to the public key of the person who registered that key. Nobody can override this. Namecoin domain names use the .bit (unofficial) TLD.

It's a really neat technology and also makes things like censorship via domain suspensions, your registrar getting hacked, etc. infeasible.

Full disclosure, I previously worked on the Namecoin project, I authored the DNS resolution daemon and the technical specification for the format of DNS data in the KV store. Unfortunately public interest in the project has waned, and deployment is the real issue - you have to have the client software to be able to resolve these domain names. There is at least some conceivable possibility Tor might ship it in their bundle in the future though, so people could type example.bit in Tor Browser to get to a hidden service. The project remains active though.
yes? this is a well-known problem, which is why CAA-ACME etc and certificate transparency logs exist.
G-sync isn't exactly about tearing, it's also about latency. The thing that matters in game is click-to-photon, which is shortened by syncing screen blank to frame availability.
The important thing and this applies to movie VFX as well is that you’d don’t actually build the parts that can’t be seen.
Adding to your unpopular opinion: if it does not NEED to be connected to a network, do not connect it.

You actually can write and test software on a system that never gets connected. (Shockingly true!)
I would hope they at least:

* Require a copy of the badge number, and verify that this officer is assigned and expected to be at this business right now.

* Require them to sign into and out of the site.

* Annotate which systems / compromises are in place.

- That all of the above MIGHT be sealed under a court order; I would hope any such order has an automatic 'sunset' date, and possibly renewal upon review by a different judge.
> If you are doing ML you will be calling into native code which can also do it just fine.

This is exactly the use case. You can only parallelize in the native code if the boundary between Python and native code is absolute. But in practice people really do want to pass callbacks into the native code, inherit from native code interfaces in Python, even something as simple as forwarding the logging in their native code back to Python logging (e.g. all of the really useful behavior possible with binding tools like pybind11). All of these are impossible to parallelize effectively today.
Probably quite a bit. Apple has been the cheer Leader for China in US, and sits on the council which has direct access to Senior CCP members.
I briefly read the article, maybe you can explain what is your point?
How would you do certificate pinning if you don't control the clients?

My understanding is that certificate pinning is only possible if you control the clients, in which case you can embed which certificates are allowed directly in the client and bypass the whole web PKI.

In a situation with general-purpose clients connecting, how would they know which certificates are meant to be allowed? That's what the web PKI is used for.

Of course, if you do provide your own clients, this just moves the problem further up the chain - in this case the place where customers would download the custom client software would be compromised and a malicious client served instead.
Dunno how long it's been since you used it, but I believe keybindings for this are disabled by default now and you have to toggle them on in your profile preferences.
Hex grids fascinated me as a kid. I used to do all my dungeons on grid paper and figured out independently some of the stuff in this article which I was probably a bit too proud of my (not so great) mathematical ability to do so.
To be fair, it's also the second time this has happened in 2 years - I don't mean okta breaches in general, I mean it's the second time the support system has been compromized to get access to customer accounts.