skysight-inc/HackerNews huggingface dataset:
They cant get away with "oh shiz we screwed up", this is the essential part of their business. If you're unable to perform the fundamental service you are offering, it's indefensible. Okta having a security breach is like a pizza shop owner who's unable to make a pizza.
It's a conversation that isn't relevant to anyone outside the company. One commenter, who may or may not work in Google, is asking for an internal codename.

You're the downvoter here so why does my comment bother _you_ so much?
It's coming from a place of realism and facts. A place seemingly lost in the current zeitgeist.

> Quorn makes chik'n nuggets made of mycoprotein with similar nutrients to a chicken nugget,

Wrong again.

https://www.checkyourfood.com/ingredients/ingredient/1916/qu...
https://www.checkyourfood.com/ingredients/ingredient/220/chi...

Half the protein, the nutrient profile is completely different (because it's mushroom and not chicken). No B12.

Where you getting your facts from man? It takes me actual time to refute your bullshit, the least you could do is provide evidence yourself.

Finally, Quorn is not rice is it, which is the original argument, so stop moving the goalposts and argue my original point if that's what you want to argue. If not, then you are contributing nothing of value and wasting everyone's time.
And my understanding is the US military leadership was generally in favor of attacking Cuba not knowing there were already nuclear warheads there.
Anecdotally a friend of mine is contemplating moving out of Kansas. She is one of the only two Pediatricians in a 100 mile radius. Racism and extreme political views is one of the main reasons. Though most of the other ones are the result of the drain that’s already happened for a long time: lack of peers, low education rates in schools, cultural degradation etc.
The only converted 747s with the distinctive double row of windows in military use are the Air Force One and E-4 aircraft I already mentioned. Neither of which is going to be anywhere near Soviet airspace without the Soviets knowing long, long in advance.

I also quoted the pilot himself. Further from him:

https://www.baltimoresun.com/news/bs-xpm-1996-12-09-19963440...

> "I was just next to him, on the same altitude, 150 meters to 200 meters away," he recalled in conversations with a reporter during the weekend. From the flashing lights and the configuration of the windows, he recognized the aircraft as a civilian type of plane, he said. "I saw two rows of windows and knew that this was a Boeing," he said. "I knew this was a civilian plane. But for me this meant nothing. It is easy to turn a civilian type of plane into one for military use."

It wasn't a "oops we thought it was an RC-135" scenario.
One of the most literal cases of "the breach is always twice as bad as the initial disclosure claims" I've seen. Also TIL the dept of defense uses okta that's reassuring for someone I'm sure.
This could be potentially really dangerous. Most Okta customers who would use support would be IT admins. This is a pretty good list to start social engineering to get more information from other customers just by calling or emailing IT members impersonating corporate end users.
It took them almost a month to review their initial analysis? What is going on at this company that they can afford to be so aloof?

> Today we are sharing new information that potentially impacts the security of our customers

Maybe in another month they will conclude whether or not that “potentially” is a yes or no.
This is a new story about how the breach wasn't limited to customer support accounts as that older story claimed.
Yup. Some quick googling shows F-14 had LANTIRN pods added and upgraded software to support smart bombs in the mid-90s.

All models appear to completely lack the necessary software and hardware to use self-guided ground-attack weapons.

A hefty unguided bomb would be possible, but a WW2 dive bomber would have better accuracy. You’re probably better off using the gun.

With a lot of luck, you could mission-kill a frigate. Radar arrays don’t like to be rapidly disassembled.
For me it takes away from the dopamine of the situation.

If I'm not predicting and anticipating things happening, I'm not really getting much out of the story. The edge of the seat feeling has been taken away so it feels like it's not really worth spending the time.

Oddly enough this somehow still works fine for things I have already seen and thoroughly enjoyed - for example I could go binge Breaking Bad twice in a row at any time, no bother.

I guess in that case I'm looking forward to the great plot points and storylines I know are coming, but if something of unknown quality has been spoiled then I don't know the journey is good enough to plow through, so there's no anticipation and no dopa to be mined.

In summary spoilers take away the dopamine so there's no longer any drive or desire to begin consuming it in the first place.
Some hosting systems may support that out of the box but I don't know what they are. Typically you would use metrics, monitors and alerts and create a notification alert based on certain conditions. No reason they couldn't provide some out of the box, but it's not common. At the very least it would need to stop after a short number of alerts or they'd end up spamming customers if it crashes on a loop
Kansas may be the best choice right now. In particular, Johnson County.
I do the same, but also with mystery content. I re-read stuff on and off as well. Also re-watch movies and shows too. If I like something, I like something.
Isn't it PHP based. I worry about anything written in that turd of a language.
I think my benchmark[1] would be a great test for this. The jq[2] version takes 50s on my machine.

[1] : https://github.com/jinyus/related_post_gen

[2]: https://github.com/jinyus/related_post_gen/blob/main/jq/rela...
In a recent sale, I saw a 15" macbook air for $1750 Canadian Dollarydoos (a discount of $250 from the original price of $2000). For t hat money it came with an M2 chip, 512gb SSD, and 8gb of RAM.

There is no alternate timeline of this universe that would make a $1750 or $2000 laptop with 8gb of RAM ok with me in 2023. The prices are high and the upgrade costs for RAM are abusive. Of course, it doesn't use SODIMM modules so you can't upgrade the RAM yourself, you have to buy an even more obscenely priced model from apple.

That being said using thin clients with even less control than existing windows or mac computers have sounds terrible too.
Developer secrets keep leaking. Can we stop the flood?
I have no trouble ignoring him.

I have trouble ignoring millions of people who don't ignore him, and then act on the dumb/controversial things he says. They have the power to do real-world harm, both individually and via the force of government.
If I'm reading this correctly, you want to protect the right to "tell people what to do and believe." That's your top priority? Being allowed to dictate what other people do... and believe?
My experience reading comments over the past few years is that some people cling desperately to the both sides argument. It seems to provide them an emotional safety blanket that allows them to justify their views because "both sides are terrible so I'll just be terrible." Or they use it to abrogate their responsibility for political change.

It's a pretty weak justification.

I can appreciate that stuff we grew up with and laughed at might not be acceptable nowadays, but that's no excuse to dig one's heels in and refuse to grow up.
Already has, https://www.bbc.co.uk/news/technology-65047304
Yesterday: https://news.ycombinator.com/item?id=38454908 (215 points, 72 comments)
>This only matters from the pov of the company. From the pov of society those customers will move faster or slower to better competitors

It absolutely matters to customers. Depending on the type of business, it could be extremely inconvenient to have to change to a different one when they close.
A 5x3 table sure looks less embarrassing than a list of 15 items
There are spaces where free copies of licensed content are widespread. Of course, I don't know anything about them, but I'm sure they provide a valuable force against capitalism.
Will Okta pay a ransom for their own bugs?

Will security companies release enterprise one-use email address products like Apple’s “Hide My Email?”

Hide My Email generates unique, random email addresses that automatically forward to your personal inbox. Each address is unique to you. You can read and respond directly to emails sent to these addresses and your personal email address is kept private.

https://support.apple.com/en-us/105078
As someone who commutes into Seattle, the Mondays and Friday where amazon people don't go in are the best
What makes you think otherwise? There are so many charities to help with every need out there almost entirely funded by churches. Homeless shelters, home building, bed building, women’s shelters, food pantries, career programs and centers to help you finish your education to get back on your feet, disaster relief and the list goes on for miles. These orgs are funded, run on shoestring budgets and are heavily operated by people freely donating their time.

Exactly how does one ignore all that evidence because people favor the effectiveness of these orgs over the bloat of government programs?
Why is there such a fevered effort to push women into an enterprise that most don't have an interest in?
Systematic Analysis of Complex Dynamic Systems: The Case of the USS Vincennes [pdf]
Total clown show running on enterprise inertia.

https://en.wikipedia.org/wiki/Okta,_Inc.#Security_incidents
The issue in question here is https://github.com/matrix-org/matrix-appservice-irc/issues/1... (and https://github.com/matrix-org/matrix-appservice-irc/pull/133...) which accidentally regressed due to other stability work done for Libera (specifically, keeping the IRC-side connections persistent, rather than reconnecting when the bridge starts). As a result there was an race condition edge case where users on the Matrix side could read history in the IRC channel while still connecting the Matrix users on the IRC side. This was one of the straws that broke the camel's back in terms of Libera wanting the bridge disabled. The other was the confusion over https://matrix.org/blog/2023/07/what-happened-with-the-archi....
Automate Instagram Outreach and Generate High Quality Leads
Seamlessly Automate Instagram & WhatsApp: Streamline Your Outreach, Engage Audiences, and Boost Conversions with All-in-One Automation Tool
More interestingly why not fake it and claim to be civilian?

Logically speaking:

- no identification: risk being shot down by both sides

- correct identification: risk being shot down by the enemy

- fake civilian identification: no risk of being shot down?
That understanding is not the same as pattern matching and if that's all you rely on to drive your car you're going to end up dead or seriously injured.
Because for any nontrivial case you would expect python+compiled library and associated marshaling of data to be slower than that library in its native implementation without any inyerop/marshaling required.

When you see an interpreted language faster than a compiled one, it's worth looking at why, because most the time it's because there's some hidden issue causing the other to be slow (which could just be a different and much worse implementation).

Put another way, you can do a lot to make a Honda Civic very fast, but when you hear one goes up against a Ferrari and wins your first thoughts should be about what the test was, how the Civic was modified, and if the Ferrari had problems or the test wasn't to its strengths at all. If you just think "yeah, I love Civics, that's awesome" then you're not thinking critically enough about it.
"For 99.6% of users in the report, the only contact information recorded is full name and email address."

I can see the retraction already: "We have run a fully unfiltered scan, as opposed to a regular unfiltered scan, and it turns out we released the full age, name, address, and DNA sequence of every customer support user."
I'm not going to pretend that I read the article every time. But if I'm going to point out something I think the article is missing or accuse the title of being false, yeah I'll check the article first.
Only useful for ransomware and crime?

You forgot the most important use-case of all: pump and dump scams!
It's so strange to me that Okta have retained their CSO. None of the recent breaches seem particularly egregious in isolation, but the pattern around bungled communication and failed follow-up investigations is comical.
I might have been too stupid to figure it out, but I found Syncthing unusable because I couldn't set up a basic "backup" style sync. That is, anything I added to my phone folder would get synced one-way to my computer... and anything I deleted from that folder would also get synced one-way to my computer. This forced me to maintain my entire photo library on my phone, which of course is exactly what I was trying to avoid.
Most inmates probably don't have a criminal enterprise they can run.

Those are the odd cases, yes, maybe you should be able to make exceptions.

But the vast majority of inmates are not kingpins.
So why isn't this an environmental/climate change issue. These corporations that want employees that can work from home to burn fuel and emit CO2 in order to travel to the office unnecessarily should be shamed for their lack of compassion and vision. These same corporations claim to be driving toward carbon neutral while simultaneously pushing for CO2 increase via their employees travel.
Are applications like batteries, semiconductors, solar panels, etc. bottlenecked by the number of available materials? Also, I wonder if the discovered materials are kind of "interpolating" between materials that are already known, or if they expand the convex hull in some way. (Though perhaps it's difficult to precisely define what the convex hull of materials is.)
Can they just reuse the same water over and over?
There never is. This is how capitalism works. Cory called it enshittification.
When we propose our niche SAAS to larger customers, we're sometimes measured from a security perspective on whether we will integrate with their Okta SSO.

Those discussions feel stranger by the day
But the shoemaker's children have no shoes?
Wanted to ask the same, because didn't find it in the article
Two thoughts:

A) Consumer Windows PCs and laptops have been getting cheaper and cheaper. You can get a Windows laptop for $200 at any Walmart. That's $200 in 2023 dollars versus for example $1000 for desktops in 1997 dollars. Microsoft's money off of Windows consumer licenses has to be declining.

B) Windows may be dying but Active Directory isn't, plus everything moving to cloud.

For the business side, it started with Microsoft's hosted email service - a subscription service many, many businesses saw value in using over hosting their own email. What's happening is the amount of things hostable is growing until Microsoft basically has Active Directory completely in the cloud. Then businesses can run with even less IT staff than they do now, but still have all the access control that Active Directory offers, even among non-Microsoft products that support SSO.
They move to get jobs and jobs are in big metro areas which are mostly coastal states (blue).
Spotify wrapped, but from you entire listening history and less flashy
Unless fantasy
Drugs can be expensive on Medicare because of the "doughnut hole". Ie, anyone on expensive drugs ends up paying around $7K-8K a year for drugs, on top of their Medicare premium and supplemental insurance premium, which together are anywhere from $200-500 per month depending on the plan.

https://www.medicareinteractive.org/get-answers/medicare-pre...

Medicare premiums increased 5.9% for 2024 ($9.80 increase from $164.90), while the 2024 COLA for Social Security benefits is 3.2%. So the longer you live, the worse your financial picture gets.
Interviewing around, there's been no shortage of remote offers with good comp over the last few years. Idiots like this guy are just costing his teams good engineers. If you assume that X% of good engineers prefer WFH, no matter what you think the value of X is, he is costing his teams them, and placing them at a strategic disadvantage compared to smarter competition.
It's not tangential in this case:

https://foundation.gnome.org/2014/11/11/gnome-starts-campaig...

https://arstechnica.com/tech-policy/2014/11/gnome-open-sourc...
It depends on how deep you are talking about. There's a difference between teaching in-depth theoretical knowledge on the subject vs teaching applied concepts.

"why do you think the lessons aren’t crossing over into academics?"

I don't think this. My anatomy and physiology class covered the basics about different processes. Things like sleep, stress, and attention were things that were covered in some assemblies or ad-hoc (at least from an applied standpoint and not necessarily deep technical standpoint).
Do you think this could be adapted to smaller robot like this Pi-based XGO CM4[0]

I know they have different hardware but the end result is quite similar: a mobile robot with an articulated grabber. And seeing your prototype made me think of the robot dog.

[0] https://shop.elecfreaks.com/products/elecfreaks-cm4-xgo-robo...
Buffalo's winter weather is subject to occasionally strong, harsh, cold winds coming directly off Lake Erie, sometimes bearing massive amounts of snow. The end result is that the conurbated area of Buffalo can be hit hard and take days of digging to clear, while only just a bit north, west, or south the snowfall might be much less. This is not a regular phenomena; when it happens it becomes part of the urban folklore. In the aftermath, residents reminisce about it for years and/or buy tee shirts with the slogan "I survived the great snowstorm of (insert year here)."
Show HN: Fanfiction and Smut AI Generator
You must work with psychopaths. If your reaction to not liking someone is to try and get them fired, there's something deeply wrong with you. I've worked with plenty of people that I don't want to be friends with, but you go to work, make some small talk, and do your job.
When I had much more energy (read younger), I finished my basement. 800sqft or so, put in a guest bedroom, a little library for the missus, a full bath and most importantly a home theater. I was talking with my neighbor who is a realtor and he said that if anything the home theater was a negative during resale. The only things that added value were the other rooms. Luckily, I built the theater so it could be converted into a game room etc, and most importantly, I built it for myself.
"Apple Arcade" apps don't show any ads and have tight restrictions on what data can be gathered.
Don't leave Washington... believe it or not you live in a well-managed, representative state that is both fiscally responsible and socially liberal.
Absolutely wild how much machinery we have flying around
Thank you so much. This seems like a saner approach for some simpler use cases.

It flattens the structure. And makes for easy diffing.
Of course a single brain cell performs a more complex operation than a single transistor
Google Researchers' Attack Prompts ChatGPT to Reveal Its Training Data
*hard linked
Wait, Unity owned WETA FREAKING DIGITAL? My goodness!
And personal wealth or lack thereof. That said, a lot of office gab back in the day amounted to sexual harassment, so I'd be glad to include sex in the taboos.
Every fiat payment is backed by similar energy and resource usage by the standing military (or dependence on another nation's via other exchange) that gives it worth and stability. Bitcoin is laudable in that it's energy and resource use is at least non-violent.
As the benchmarks show, jaq is pretty significantly faster than jq.

I've commented before that I expect Rust to be a language that is generally faster than even C or C++ in a way that's hard to capture in small benchmarks, because the borrow checker permits code to be written safely that does less copying that other languages have to do for safety. Given the nature of what jq/jaq does, I wouldn't be surprised that that is some of the effect here. It would be interesting to instrument them up with tools that can track the amount of memory traffic each benchmark does to compare (that is, not memory used but total traffic in and out of RAM); I bet the Rust code shows a lot less.
Not sure if it's reasonable to expect perfect security, people are fallible so that position won't make you very happy. We'll all get hacked, question is if we make it easy for them to gather private information which in this case didn't seem to have happened. The fact that it wasn't, probably is due to it being "the essential part of their business".
Why being interrupted is so irritating
Reminds me of a dystopian sci-fi film where a TV projector confessional pharmaceutical dispensary booth was mandatory. Can't think of the name. It was an early film by a major director, shot in film school then remade IIRC. Name was possibly some sort of acronym or alphanumeric code.

Edit: Got it! George Lucas' THX 1138. Clip @ https://youtu.be/U0YkPnwoYyE | IMDB @ https://www.imdb.com/title/tt0066434/ | Wiki @ https://en.wikipedia.org/wiki/THX_1138
Making Wasmer Edge open source would convince me to use Wasmer instead of the other options! I can see that this is on the roadmap. Any ETA you can already share?
Also I would be interested in restricting specific requests to certain regions.
I think we all understand this to some degree, but working on open source, outside of a few flashy projects, is some of the most thankless work there is. And contributing an immense amount of difficult work (such as perf and correctness improvements across the board) to a repo that you don't own and won't be recognized for is somehow significantly more thankless than that. For whatever reason, people only really care about the creator of a project, and virtually no one else.

For instance, do you know who Junio Hamano is? Oh, he's just a guy who's been maintaining a fairly minor project called Git for the last 15 years. But everyone can connect Linus Torvalds with git, even though he only worked on it consistently for a year or two before leaving it [1].

Also, and I think we all know this too, but working on someone else's codebase kinda sucks. Greenfield is so much more fun. It's a shame, but I'm really not surprised in the slightest.

[1]: https://github.com/git/git/graphs/contributors
Losing the Imitation Game
https://archive.ph/ppHHg
I think you mean - Is Idiocracy actually a documentary?
I certainly thought about that, but it seems a lot more believable to me that there's something missing from our current understanding than that this impossibly large number of interactions happened resulting in the just so universe we live in. That we live in the most absurd of all possible universes, the one where pre-determined clumps of matter post on Hacker News, typing each character one by one without choosing to do so, is harder to conceive of than that we just have free will at some level. And it's not at all hard for me to imagine that any supposed evidence, scientific or philosophical, is more than likely just flawed or limited in some way, so I have trouble buying in to arguments like this.
Can you provide some context to your past experiences? In x years, I had y number of jobs, of those y jobs, I only had to apply to z number of companies before getting an interview?

Also, say google is hiring an ML engg and there are 1000 applications, what do you think does the recruiter do to 1000 resumes?
Everything is political, especially the system of wealth creation and distribution.
glibc isn't totally free of such issues https://www.algolia.com/blog/engineering/when-allocators-are...
This only runs on AWS, so I guess "self-hosted" means "runs in your AWS account not ours". I don't understand the benefit.
If you become big enough, you'll get hacked too. Question is how hard you make it to find anything useful.
I'm aware, but I don't agree that we should ignore "physical world" implications

We got hurt by that in side-channel attacks.