skysight-inc/HackerNews huggingface dataset:
Most companies making this jump are already using azure and vulnerable to any azure compromise. And for a long time, adding in okta was some kind of trendy thing to do "for security" but all its adds at this point is another point of failure. Organisations that can rely exclusively on azure much better off doing so imo, the argument about the mfa being somehow better in okta just isn't right in 2023.
Yeah usually the TLS libraries used by XMPP clients don't check SCTs. Not even all browsers do it. Chrome does it, Firefox does not for example.
> This is often the case outside of Wikipedia as well.

Often they just read the wikipedia article that cited the paper.
In fact, it prevents very few race condition bugs.

Even inside a C extension where the Python API feels like it gives you control over when you release the GIL (with functions you'd have to call explicitly to release the GIL), it turns out that:

* any operation that allocates new Python objects might trigger garbage collection

* garbage collection may run `__del__` of objects completely unrelated to the currently running C code

* `__del__` can be implemented in python, thus releasing the GIL between bytecode instructions

Thus there's a lot of (rarely exercised) potential for concurrency even in C extensions that don't explicitly release the GIL themselves. nogil will make it easier to trigger data race bugs, but many of them will already have been theoretically possible before.
For a split second, I thought bazel[0] finally got externally renamed to its true name.

[0] https://en.m.wikipedia.org/wiki/Bazel_(software)
I joined a fraternal org about 7 years ago and for all its ups and downs, its an insurance policy on those social connections where you can develop and grow in them. They change, but they can be pillars of stability for a lifetime. Churches and activities like hunting and golf are other ones as well.
Cool to see it like that, but I think the exposure/dynamic range of the photo makes it look darker than it really is. The path of annularity is what's shown in the map on the page. The path of the partial eclipse is much larger but not as dark.

I was in Louisville, Ky which the last photo shows as black. But in reality we didn't even notice a change in brightness (it was cloudy).
Oops. Here's an unpopular opinion: maybe critical gatekeeping with SSO using OAuth, SAML, and 2FA is something to run on-prem rather than pressing the SaaS "easy button".

This includes not only Okta but Auth0 (Okta acquired), Authy, and Duo.
If you ever look at a map, you'll realize that China has plenty of trade routes through Eurasia. This is literally the whole idea behind the BRI initiative. China can ship goods to the majority of the world without relying on seaborne shipping. The routes also go through countries that are friendly to China and are increasingly hostile towards the US.

However, it's also absolutely laughable to think that US could actually blockade China effectively. Every single war game that the Pentagon ran against China they lost decisively.
Cloudflare mitigated yet another Okta compromise
I'm not taking about bugs but error handling. For bugs there are panics and they do print stacktraces. For error handling stacktraces are just noise.
It's still around, I believe quite a lot of specialist software is built on top of Eclipse. But, I think when Android Studio went from Eclipse to IntelliJ, it lost its last real big use case. The wiki page lists a few tools, the most known one to me is DBeaver (https://github.com/dbeaver/dbeaver)
Any country that’s not completely within USA sphere of influence would rationally not want to hold dollars after what they did to Russia’s reserves.
Most likely chert, a very common lithic material that can look very similar.
Oh its even better than that, the rich can buy and rent places out which eventually gives them enough equitty and income to afford another unaffordable place.
Housing needs to slow down dramatically so wages can catch up. I dont think that will happen, the middle class will be split by those that own their homes and those that dont.
Should have just used zfs....
> and even sometimes wonder, “Is this machine process intelligent?”

Your phrasing (and I thank you for your candor) is exactly the phrasing of an extraordinary claim.

For example "and even sometimes wonder 'is the moon made of cheese?'" - clearly that is the extraordinary claim, not its negation.
China ship is focus of pipeline damage probe, Finland says
Document signing, finally open source
I have an iPhone, however I’m not on any mainstream social media, and I’m very conservative with the apps I do install, and I prune aggressively. I rarely get push notifications (maybe a handful a week, in that ballpark) from apps. Obviously I receive notifications for emails and messages, but those are “soft notifications” that don’t interrupt me.

One thing I’ve found even more liberating: not taking my phone when going out for walks. My watch is enough. I’m still reachable for calls and texts. I still get urgent calendar reminders for meetings, and I can play virtually any song or podcast ever produced, if I so desire.
Counterexample: https://github.com/nushell/nushell/issues/4096

Old glass terminals are still in use here and there, too.
Energy, WiFi and RAM use by Android messaging apps
Hi! I would like to show you my small analysis of Android messaging apps: power draw, bandwidth and RAM use.
Romney got on board with the push for increasing healthcare coverage in MA and helped get the Medicare waiver required for MassHealth, but he didn't propose the system and vetoed significant parts of it, most of which was overridden by the state legislature. "Romneycare" was the name his GOP opponents gave it when he was running to be the Presidential nominee in 2012.
Somebody please try leaving your phone at work
It depends on your threat model. Just enabling BitLocker will defeat someone from plugging in a Linux live USB and resetting your Windows password. For corporate security ATA Secure Erase done by a vendor who accepts liability and gives them a "certificate of data destruction" may be enough to meet HIPAA, FERPA, SOX compliance requirements. Or they consider drives cheap enough that physically shredding them to ensure no mistakes is the better choice. At the national security level you pulverize the drives after zeroing them, likely in a windowless room inside a facility with armed guards.
The statement still remains valid, since the current year is no longer 2021 and it doesn't claim that the list is absolute or eternal. Neither does the article.
Not attacking its neighbors would be a goods start.
There is no realistic chance it will get repealed if the democrats control either branch of congress or the presidency. I think it was a success. It might not be as good for people who were getting excellent healthcare through work, but tens of millions of people have insurance who didn't before.
If it does, there's zero chance that Microsoft know about it.
When your company is worth $2,427,000,000,000 , you'd have to be insane to risk it all like that.
But then I might be left alone with my own thoughts.
Earlier this year I decided to get a cellular Apple watch because, while I want to stay in touch with my partner while walking our dog or running short errands, I don't like having my pockets stuffed. I felt a similar sense of relief and freedom as the article author - it really feels great to not be tethered to the attention economy, but still be in touch with your loved ones using just a tiny device on your wrist. Nowadays I opt for leaving my phone at home as much as I can, and I very rarely face any sort of inconvenience because of it. I think with smartwatches getting more capable now, and reaching dumbphone + navigation + weather info functionality, this is becoming a really solid alternative to carrying a phone with you all the time.
So in Ireland, as mentioned elsewhere, our normal police wear a hi-vis Star Trek uniform, and aren’t generally armed. We also have a few specialised branches for organised crime, terrorism, etc, though; some of those _are_ armed, and have significantly scarier uniforms, and much more extensive training. Same organisation, but totally different role.
I picked up an iPod, the first generation that had the buttons integrated into the scroll wheel, and replaced the battery. I could probably get by loading this up with podcasts, TED talks & audiobooks. My downfall is being insanely bad at directions. So I kind of need to bring my phone with me while driving most places.

I have done as the author mentions, and simply walked around my neighborhood without a phone. It really is a great experience.

Thanks for this! I will put some more effort into disconnecting more.
Thank you!

Ya, I really enjoy pattern matching. I think new language features just take a long time to percolate through the community. I remember when `->` was controversial, but that's the only way I write lambdas today. :D
I honestly feel perfectly liberated with my iPhone. Yes, I have all these apps. That does not mean I must use them simply because they put a stupid notification up. Do I want to shop? No? Then why would I open Amazon? Do I want to look at what my friends are doing? No? Then why would I open Instagram?

I enjoy very much having the ability to remain in contact: with friends. Which is why those notifications are on, for various messaging apps. Work notifications are only on during work hours.

I also enjoy the time-wasting aspects of a few mobile games and some social media like Imgur. But like, I only use them when I am choosing to waste time, like if I'm waiting to meet someone and they're running late.

Am I that much of an outlier? My phone is a tool, an amazing tool to be sure, but so much of this is written as though people use theirs with shock collars attached; that they have no free will whatsoever and are utterly enslaved by the things.
Humans are bad at reasoning about multiple threads simultaneously, so I suspect the more practical shift is the trend we've already been seeing toward more declarative syntax.

eg `for` loops are being replaced by `foreach` loops,`map` and `filter` operations, etc. These tell the compiler/interpreter that you want to do some operation to all the items in your datastructure, leaving it up to the compiler/runtime whether and how to parallelize the work for you.
> but it wasn't so much of a problem 20 years ago

I mean, ok? 20 years ago is a long time. As you say, pay is now like ~1/3 that of industry, and the pension doesn't make up for it.

> What you're talking about, though, is a problem with procurement procedures. It's far easier to get through Congress than any change in operational budget that involves increased pay for federal employees

Wait, is raising the pay of federal employees considered "procurement"? If not, aren't you agreeing that procurement of software consulting services is an end around the main issue, which is that wages of federal employees are too low (a non-procurement issue)?
Okta try not to get hacked for a month challenge [level impossible].

In all seriousness, they seem to love getting pwnded. You would hope that the constant stock drops as a result of events like these would force change, but I guess not.

1. https://www.malwarebytes.com/blog/news/2023/01/okta-breached...

3. https://www.theverge.com/2022/4/20/23034360/okta-lapsus-hack...

3. https://techmonitor.ai/technology/cybersecurity/okta-cyberat...
Are you using something like tmux: https://unix.stackexchange.com/questions/608142/whats-the-ef...
The proof implicitly requires a large set of objects. See also the linked page in one of the other comments. Since Wikipedia contains millions of pages, you can directly convert the other proof.
Unfettered would look like in the 19th century: arrive on a boat, spend a few hours on Ellis Island for a basic medical check and review of your paperwork with answers to 29 questions, start your new life.

(Source: https://www.statueofliberty.org/ellis-island/overview-histor...)
Serverless Sources: Our Team's Favorite Places to Read and Learn in 2023
> Aside from being a huge red flag, what's stopping you from just putting in "mental health" and not being very specific? Does anyone even care/check? Surely HR can't be that petty?

There's still a stigma attached to mental health problems. Many, perhaps most, people can't seem to differentiate between "I'm feeling really depressed" and "I'm psychotic and want to kill a bunch of people". It's very sad that this is the case, but that's how it is.

1 in 6 Americans takes antidepressants, so chances are you know quite a few people who are taking them. However, I'll bet that the only people who've ever told you they're taking them are really close friends and family.

Why? Because this stigma exists.

(note that I'm not interested in debating whether antidepressants work, or whether taking them is a good idea... that's not the issue here)
I recently received a 144Hz ASUS monitor from the IT department at my company. I don't game on company computer and yet the difference while doing regular day-to-day work was noticeable. Cursor stutter/delay was noticeable when I switched back to my personal laptop with 60Hz setting. Time to look forward to 240Hz!
Purely anecdotal but their systems are designed very poorly, they outsource their support to some really low quality vendor (read: you get 0 support). This is not a company I would trust if I had the choice.
Joe Liberman and 40 republicans.
I checked out waggledance.ai - looks awesome what it can do and really interesting to me!

My question would be what does waggledance do that a GPT4 reply would not provide besides the (really well done) UI?

In my experience the way the tasks are generated and broken down is pretty much what I get when I ask ChatGPT.
I'm hearing from multiple friends with teenagers that they're uninterested in learning to drive.

Unthinkable to me.
Possibly a dumb question but why would Turing incompleteness be desirable in a language whose entire purpose is generating code in a Turing complete language?
That’s counter to the ideas of civilization.

The first corporations were monasteries. The monks held all in common, so the property belonged to the abbey.

Should that be illegal?

Should reporters at the New York Times be treated as personal servants of the publisher?
In bought a cellular Apple Watch a couple of weeks ago for the same reason. Verizon charges me $5/mo for the privilege based on my existing plan.
The ACA is how that was implemented. I can now buy my insurance as an individual.
Estatica was a cool game for its time. https://youtu.be/9SsR5fPjGu4?si=Eu6RmO-vlsC8Fps5
See also, the "television is no friend of mine" sketch: https://www.youtube.com/watch?v=6fA9sJ3LBwg&t=11s
EB are immigraiton visas, that is green card visas. Unless you imagine that people just file EB visas to come work in the USA. Clearly you have zero idea of what work visas people get.

Also, just do a google search, "high-skilled professional visas" without doubt refer to H1B

> Unless you are arguing a software dev job is somehow more skilled than a semiconductor engineer or a biopharma scientist, you have no argument here.

Maybe they should be paid better. Also, I argue that being a nanny or a janitor requires skill too, much more in fact than writing a dumb CRUD app. If software industry having high margins is the problem, maybe that is a separate problem solved with anti trust actions.

> And which visa they are going to be hired for? EB visa? Which take 2-3 years to vet? Which company will wait a year to fill a position instead of just scaling down? If you take down the H1B, there will be shortages and reduced productivity. If you need proof, just check how many of your coworkers are on H1B.

As someone on H1B seeing rampant "fraud" and a mere 14% approval rate, seeing friends with PhDs not getting lotteries while people with fake job offers by "consultancies" get it, I am not asking to end the H1B. I am asking it to be actually for "high skilled" labor.
> The authors found it most notable that a significant portion of the racial wage disparity is attributable to unexplained factors

It’s probably because systemic racism is a bit more covert and insidious in nature than overt racial discrimination. But just because it’s not obvious doesn’t mean it’s not there. However, one could argue that racism in the US is actually quite overt and obvious.
It isn’t unexplainable factors, they’re just factor’s that those in positions of power do not want to pay attention to or don’t appreciate or understand the need to. It’s things like recognising the impact that intergenerational trauma has on individuals, their families and also their wider community. It’s things like poverty. Or over-policing of poor/black communities. And it’s also about how all these different issues intersect and further disadvantage people.
A extended account, with a good deal of backstory about the people and state- and federal agencies involved, can be found in Jennifer Pahl's book, Recoding America. [0]

[0] https://www.amazon.com/Recoding-America-Government-Failing-D...
When you use capital to buy machines, they are embodied labor from outside of the organization and the exploitation is shifted from internal to external.

The core claim is that simply buying things and managing things produces value all on its own and it's transparently false as if the thing wasn't produced, you couldn't buy it.

The other core claim is that there's a legitimacy to the idea that if you buy something that is socially useful, you get to derive the exclusive right to the fruits of it which makes no sense.
Wow! So this explains why setting it up later down the road is almost instant on Macs with T2 or M1/M2? Because IIRC with <2016 macs there was a long wait if you already have been using that disk for a while.
Why not fork Go and implement this directly? (and also removing any telemetry Google might have installed while at it...)
Just walking over the border seems way easier.
Which word is confusing, "out"? It's a common word in both meanings that constitute the pun in the title.

> I have every confidence that America's industrial base will happily expand to fulfill any (funded) mandate—does Stoller seriously disagree?

I do not have that confidence and yes Stoller seriously disagrees with your belief (emphasis mine):

> Surges due to wars aren’t new, and there’s always some time lag between the build-up and the delivery. But today, the lengths of time are weirdly long. For instance, the Army is awarding contracts to RTX and Lockheed Martin to build new Stinger missiles, which makes sense. But the process will take.. five years. Why? What is new is Wall Street’s role in weaponry. We used to have slack, and productive capacity, but then came private equity and mergers. And now we don’t. The government can’t actually solicit bids from multiple players for most major weapons systems, because there’s just one or two possible bidders. So that means there’s little incentive for firms to expand output, even if there’s more spending. Why not just raise price?

> But don’t take my word for it, take that of the Pentagon. In 2022, the DOD reported that “that consolidation of the industrial base reduces competition for DOD contracts and leads DOD to rely on a more limited number of suppliers. This lack of competition may in turn increase the risk of supply chain gaps, price increases, reduced innovation, and other adverse effects.” And that’s why, more than a year into the Ukraine conflict, the ramp-up is still not where it needs to be.

> ...it's not like these resources are going to waste, the war in Ukraine (we will elide the other conflicts) is very much worth the investment from NATO's perspective.

This point is orthogonal to the article.
techno-optimists are literally Danzo from Naruto - they have wrapped their self-serving ideas in the trappings of "protecting the many" and "innovation" and eventually admit they just wanted to be more powerful.

Unclear who Sasuke is in this case but I will think about it
One can get fingerprints of TLS endpoints ahead of time and/or from a known clean network then compare and contrast to what you see from the location you suspect might be MITM'd. I believe there are browser addons that display certificate fingerprints and alert if a certificate changes however one can click on the lock symbol and drill down to the same info.

openssl s_client -servername news.ycombinator.com -connect news.ycombinator.com:443 < /dev/null 2>/dev/null | openssl x509 -fingerprint -noout -in /dev/stdin
SHA1 Fingerprint=7E:49:BA:40:86:87:B3:39:66:93:94:9E:9C:45:71:85:3C:8D:95:16

A higher friction method would be to use a browser addon that would pin a certificate to a site. Not useful in the case of the Jabber client but useful if one was visiting Jabbers website to validate something. Some Jabber clients and servers have their own method described in another part of this thread [1] to protect against interception.

The openssl s_client method is likely the most versatile for testing from different locations, ports and applications.

[1] - https://news.ycombinator.com/item?id=37956911
FDE means you don't leak data to unencrypted parts of the file system. Temporary files and browser cache are areas sensitive information can be inadvertently left behind. With FDE you can check off the box "encrypted at rest" without having to qualify it with asking if the data is in the right folder or vault, if temp files are overwritten, etc.
Some people don't have the intellectual capacity to grasp the fact that a healthy populationin working age brings more wealth to everyone in the long run
I will never understand why people eat these peppers. I can't imagine any food being so good you'd overlook three and half hours of extreme discomfort followed by an hour of agony to eat it.
I could also make my own operating system.

If I had the time, knowledge and money. Which I don't.

So, I rely and support others that do to ensure I have a functioning and constantly running system without much maintenance work, except donating one a year.
s/India/Whatever_group_you_think_it_was/g

I am Indian, and Indians often get attacked for 70% H1b going to India. I am tired of it. I do not represent the Indian govt when I try to find job in USA.
I have read about title inflation but I do not know about title deflation. I afraid you need to provide proof for your claim before I take it seriously. I do hear entry positions requiring a few years of experience, but often that is just a way to promote an internal hire, like a contractor or an intern.

How do you define economic value? By money only is a bad metric. Take pharma for example. The top 5 biggest pharma companies combined can't equal the same market cap or liquidity of 1 Apple (1.9T vs 2.5T). Now think about the societal impact. If you have to live in a place without drugs (those 5 pharma produce almost all the lifesaving drugs in the US) and a place without Apple products, where would you go?

I can go into the reasons why Apple is 2.5T and the pharmas is fraction of that, but that would be too long. It is simply the economy of scale, cost of manufacturing, and legal regulations. The cost of doing business results in lower salary for the end workers but it doesn't mean the industry is "lower value".
That's my main gripe as far as the Apple watch is concerned. I'm fortunate enough to have a corporate cell plan so I don't pay anything for it, but I'm not looking forward to having to be on an expensive plan + $5/month if I ever change jobs.
gunicorn uses multiple processes
bibi didn't finance. he allowed Qatar to infuse cash
Is there a company more boycotted than Nestlé? I know I haven't bought anything from them for many years.
At what point can an interpreter establish that a given python script will not be importing any more modules?
No support for pls (language servers)?

I used to use geany a decade ago on my personal linux laptop. I use kate now for a notepad app, but Sublime for a programming editor, which is ok for its pls support. I'm going to buy a license for it on Monday.
> Azure AD

Nobody Gets Fired For Buying _Microsoft, I guess.