skysight-inc/HackerNews huggingface dataset:
Un nuovo botnet denominato KV ha destato preoccupazione nell'ambito della sicurezza informatica, utilizzando firewalls e routers di Cisco, DrayTek, Fortinet e NETGEAR per trasferimenti dati clandestini. Questo nuovo insieme di dispositivi compromessi è diventato una rete segreta per attori minacciosi avanzati, tra cui la minaccia conosciuta come Volt Typhoon, presumibilmente collegata alla Cina.

Il team Black Lotus Labs di Lumen Technologies ha battezzato questa rete malevola KV-botnet, individuando due cluster di attività complementari attivi almeno dal febbraio 2022. Questi due cluster, identificati come KY e JDY, agiscono in modo distinto ma coordinato, infiltrando i dispositivi per facilitare l'accesso a vittime di alto profilo e stabilire una rete segreta. Le informazioni di telemetria indicano che il controllo del botnet avviene attraverso indirizzi IP in Cina.

Mentre i bot del JDY si dedicano a una scansione più ampia con tecniche meno sofisticate, il componente KY, con prodotti obsoleti e fuori produzione, è utilizzato per operazioni manuali contro bersagli di alto profilo. Si sospetta che Volt Typhoon sia uno degli utenti del KV-botnet, poiché il declino delle operazioni ha coinciso con la divulgazione pubblica delle attività avverse mirate all'infrastruttura critica negli Stati Uniti.

Microsoft ha dichiarato che il botnet cerca di mimetizzarsi instradando il traffico attraverso attrezzature di rete SOHO compromesse, come router, firewall e hardware VPN. Il meccanismo esatto di infezione iniziale è sconosciuto, ma una volta compromessi, il malware si sforza di rimuovere programmi di sicurezza e altre varianti per garantire la sua presenza esclusiva sulle macchine.

Progettato per recuperare un carico utile da un server remoto, il malware può caricare e scaricare file, eseguire comandi e moduli aggiuntivi. Recentemente, il botnet ha puntato le sue attenzioni alle telecamere IP Axis, suggerendo un'ulteriore ondata di attacchi imminenti.

Un aspetto intrigante è che tutti gli strumenti del botnet sembrano risiedere completamente in memoria, rendendo difficile la rilevazione a lungo termine. Tuttavia, riavviare il dispositivo può interrompere l'infezione, anche se il rischio di reinfezione permane.

La preoccupazione cresce dopo il rapporto del Washington Post, che riporta l'infiltrazione di due dozzine di entità critiche negli Stati Uniti da parte di Volt Typhoon, incluso l'attacco ai servizi pubblici di energia, acqua, comunicazioni e trasporti. Il gruppo di hacker ha tentato di mascherare le loro azioni utilizzando dispositivi comuni come router domestici o da ufficio prima di colpire le vittime.

La complessità e la portata di questa minaccia sottolineano l'importanza di una protezione avanzata e di una costante vigilanza nell'ambito della sicurezza informatica per difendersi da attacchi futuri di questo genere.
> If you don't like the status quo you should avoid taking adversarial stances.

This is ahistorical. And it’s essentially the argument which has always been used by defenders of the status quo to avoid taking responsibility for the defense as such. But worse, you’re conflating mere recognition of an extant adversarial relationship with initiating it in the first place. You’re arguing that it’s strategically superior to unilaterally concede not just tenants’ interests but any acknowledgment that there even are tenants’ interests.
https://www.videogist.co/videos/insane-bug-in-my-code-from-c...
People do things because they enjoy doing them. And people will continue to do things they enjoy doing such as programming.

I don’t think it has anything to do with competition or being left behind.
The rate is 0.72. Every 20 years you lose 20% of your population or a percent a year. That would give South Korea 100 years of existence at this point. It’s dire.
These are necessary to monitor confidence scores for the new prompt technique that Microsoft came up with,

https://stackdiary.com/microsoft-announces-breakthrough-in-p...
What the hell? I don't use the fediverse but that sounds extremely bad.
Russia wasn't supplying from Iran in 1988, China and India didn't have the navies that they have today. China just needs to sit and watch and keep repeating "stop fighting, start peace talks" and watch the US get all worked up. Or maybe invade Taiwan in the meantime.

Biden will not directly attack Iran anyway. But he is going to approve strikes on Iran affiliated groups such as Hezbollah and friends.
What confuses me is that there seems to be a bathtub curve on the fab market.

We've got the race to 7-5-3-2nm for high-end parts, and then a couple generations back on support chips and lower-performance cheap parts.

Then you've got the dead zone. Is there a meaningful active use case for 1-micron processes anymore?

But then you get to perennial embedded-market stuff (Z80, 65C02, 80186) originally built on 40-year-old processes. And going even further, you have stuff that's a handful of transistors on a die that was probably drawn with markers for the original lithography; I'm not sure we'd even use numbers to describe that process. How does that stuff get made anymore? It can't all be draining down old stock.

I can't imagine it's cost effective to use modern-fab capacity to manufacture Z80s, 555s, or 74LS04s at their original die sizes. And if you shrunk them to put a million on a wafer, even assuming that's feasible, you'd change their performance characteristics in ways that might break long-established specs and contracts.
I don’t think it’s as simple. The way I’m understanding your framing is that it’s not that there’s no causality, but we have events that are always correlated but causality is impossible to determine due to quantum effects. However, what I read in the link I posted is that not only is it impossible to determine, there are multiple causal orderings and they are all valid due to superposition (ie it’s not just a mathematical artifact of our model but it actually behaves this way in the quantum realm). Of course I think no one actually knows and it’s one of the big mysteries of modern day physics, but the fact that this “model artifact” is able to be experimentally exploited to achieve things not possible classically (eg extracting energy from a thermally neutral environment) makes me think the quantum aspect is actually extremely weird.
This is a Washington Examiner article base on a Heartland Institute study, not an MSN article. Please link to the original source.

Fraud rates as high as 20% is ridiculous.

Oregon has had mail-in votes for over 20 years. Despite many attempts at finding fraud, like the claimed "Seventeen percent of mail-in voters said they cast a ballot in a state where they were no longer a permanent resident" where it would be easy to detect fraud, it has not been found.

In any case, casting a ballot in a state where you are no longer a permanent resident is not necessarily fraud.

Americans living overseas vote in the state where they used to be a permanent resident, and military voters can vote in their state of origin, despite living outside their voting jurisdiction.
They might be in slightly less trouble if they had provided dumps of their catalog for download in the past, like other libraries do.
'Metallicity' in that sense is used to describe stars and the Sun, being a relatively young star is metal rich.

Edit: 'young' is confusing here as pointed out in sibling comments - young compared to the age of the universe rather than young in terms of stage of stellar evolution. To make this even more confusing, this is 'population I' - younger and more metal rich unlike older, metal-poor 'population II' stars.

https://en.wikipedia.org/wiki/Stellar_population#Chemical_cl...
Very clever.

IoT pairing is a tricky problem because phone/laptop devices give a very limited API for communicating with a new WiFi device that isn't yet on your WiFi network.
Great design is precisely what allows lifting the requirements for advanced skills. Poor design resorts to manual editing of ugly markups
That is strictly not true. You would absolutely capitalize the salaries of those building capital assets.
I had to dig a little to figure this out, so, to keep yourself safe:

Android: disable Bluetooth when you're not using it (but you'll be vulnerable while you are). My Pixel just got the 12/5/2023 security update, which fixes the issue; not sure about non-Pixel phones.

Linux: Open up /etc/bluetooth/input.conf and set ClassicBondedOnly=true (in my case I just had to uncomment this, not add anything). The next version of bluetoothd should default to =true, but you can set this yourself now. Don't forget to restart the bluetooth service after doing so.

Not sure about macOS or iOS; I don't have devices running either of those.
Kitchen renovations are a zero-sum game
https://archive.is/KbuvE
This person needs to make small git commits as they refactor, and use git bisect to find which one broke the test, then fix it and squash that fix into that commit with interactive rebase ...

Time is not like money in that no time that elapses is ever yours to get back. Whereas sometimes money that leaves your hands is actually still yours.

Giving up on a refactoring because of some failed tests could be wasteful.

How much time you put into the refactoring already should enter into your decision making because if you throw it away, you may have to put in a comparable amount of time to redo the job.

If you've sprayed 15 coats of lacquer on a piano and a fly lands into your 16th one, do you strip it and start again, or just sand out the blemish and keep going? What if it's half a coat on a ukulele?
Possible Tsunami Risk as Geologists Discover 45-Mile-Long Hidden Fault
Houston, TX has no zoning at all.

If this is such a great idea, I assume you've already moved there and love it?
The state bar usually provides a service to help people find lawyers.
I re-watched The Andromeda Strain yesterday, and am glad to see this is only a (presumably) fixable technical hitch.
But our sun is quite young afaik (middle aged) and earth is not much younger so it’s weird to hear the reasoning that metal-poor systems implies young system…
This is so first world problem...

No 'note acceptor'? Thank god, that shit is slow, finicky and ugly. Just PayPass with your plastic card and have the order number in 5 seconds. No, 99 of times from 100 I don't need any paper receipt with an order number, so I don't even click on "print the receipt" button in the first place.

And lastly, I don't buy bags of ice, shovels and dildos at McD.

> Do I want to log in? No. Am I sure? But I could be earning bajillions of Rewards Points for my $1.75 purchase!

Now this is what should bring a slightly boiling cauldrons and pitchforks made from chinesium to those who thought and designed that shit up.
That model assumes that there's only one owner and that identical units have identical rents.
Is this AI generated blogspam? It doesn't seem to have a point, it hallucinate things, and it was seemingly endless. This is nothing like their other blog posts.
Ah ok. So this is about the composition of just the star and not anything about the broader system.
This issue brings forth a wave of angry software devs that don’t know anything about taxes asserting that this is unprecedented and crazy. But at the end of the day, building software, ESPECIALLY for a novel startup, is building an asset.

There might be some argument that there’s regular maintenance to be considered but generally speaking you are “building”. And that means it’s a capitalized cost. “It’s bad for me startup” is such a weak argument…
A female albatross over 70 years old
What’s the latency like, when hosting your app on Fly, and your db on Supabase?

Is there some coordination happening to make sure they are in the same data centre?

Edit: I should have read the article. All explained in the first paragraphs that the db is hosted on Fly infrastructure.
>>> the difference between console, terminal

>> these two can be used interchangeably, even in Linux.

> No, they cannot. Your tty4 or xterm underestand different commands than your shell.

I think you're replying to an imaginary comment? The question was about console vs. terminal, not terminal vs. shell.
The less authorities try to interfere with the free market, the better.
Recall the token ring not falling and error management way, compared with the Ethernet assume possibly failure. It is such a headache to manage token ring and sna network. At least sna is reliable. Token ring is actually no. Suprisng. But at least sna assume there might be issues in the other end. Not token ring. And that is the problem of assuming all problem is managed.
Microsoft purchased tech and people from AT&T to help boost Azure's telco capabilities as a cloud solution[0].

I haven't followed what's happened since it was spun out, but I know that Network Cloud was heavily OpenStack based so I'd would be interesting to see how that may have changed but I no longer work in the Telco space either.

[0]: https://azure.microsoft.com/en-us/blog/improving-the-cloud-f...
I was asking about console vs. terminal. Not CLI vs. TUI (?)
I would expect, in a just system, jail time for every "reporter" who did this, and every executive who approved of it.

To stop the business I would expect a minimum payout of the entire revenue (not profit) of every published article and paper, payable to in its entirety to each individual victim.

Instead none of the criminals are in jail, and the financial penalty was negligible compared to the income that came about from the crime.
I don't get how changing to if else fixes this. The compiler can still reason that the condition is always going to be true (and if it isn't that is undefined behavior, so f it). And then it will elide the comparison. Same result. The compiler bug here is that for some reason it is not able to apply a valid (lol) optimisation to if else statements. The author should not rely on this. Compiler authors will eventually fix this bug and his game will break again.
Why do they use encryption?
Hilarious writing by the Kingdom of Nouns guy. Dave Barry-esque.
... as is the situation in many real world apartment blocks
I never really understood the benefits of a wireless keyboard. Do people usually carry their keyboard from their desk with them when they take their laptop somewhere else?

I guess I could maybe -- maybe -- see the convenience if you have some sort of small-form-factor keyboard that you stash in your bag. But still, the wire doesn't seem like much of a burden, and personally I'd find the annoyance of needing to ensure the batteries are charged/fresh to be... more annoying.

I can kinda see how a wireless mouse would be nice; the wire can get in the way of mousing around sometimes. But I'd still rather a wired one than wireless.
Fossil fuel subsidies is completely irrelevant to capitalizing certain costs
GPT-4 was done training August 2022
I can kinda see why GPS working would be a core feature of a map product on a mobile device...
This is empirically untrue.
Here, “young” means measured from the Big Bang.

Our sun is made from the stuff of previous stars.
Wait, what? Wifi? Does that mean that a car that has CarPlay must also have Wifi that can act as an access point, and do some sort of automatic connection negotiation when the phone is plugged in and CarPlay is activated? That seems... terrible.
Hardly. Identical layouts maybe, but part of the property owner's advantage is exploiting asymmetric information and charging each tenant what they're willing to pay, not just what the other tenants already pay. (This is one reason why talking to your neighbors is important.)
shut down with no jail time.

because they listened to the voicemail the family of the victim thought the victim may have been alive.

no jail time means none of the people doing this will stop.

no meaningful financial penalties mean no businesses will stop, and no jail time for executives that approved it means they'll remain ok with it.
Maybe because it helps tip the balance in your favour? Dunno about you but we've had just about enough Soviet dominance in Eastern Europe. We're gonna have have "US hegemony" for a change now, being "US satellites", as Russia likes to picture it.
In order for an AI to evaluate the effect of a small molecule on the brain, it would have to... simulate the operation of a human brain in a simulated environment. Similarly, to avoid Thalidomide-style disasters, it would have to simulate the conception, development and growth to adulthood of a human.

These things are... physically possible, but have WBE and uploads as a hard requirement. Those are going to affect a hell of a lot of things more than the drug industry!

Amusingly, machine-phase nanotechology and blood nanobots would be easier to evaluate, since simple cell-level mechanical interventions (reading surface proteins on cancer cells and chopping them up, say) will have fewer interactions than a small molecule that diffuses into every cell in the body.
Making you build an asset and treat it as an asset from a tax perspective.

Sounds like you’re really complaining that you have to deal with regulation in the healthcare industry. Your post has nothing of merit about why it’s not right to treat it as a capital asset. You’re just whining that it’s worse than the status quo you had before.
From the perspective of Vancouver this reads very differently. I would have thought the apartments were vacant because of foreign speculation, like mid level bureaucrats in China trying to secure a condo. Not landlords charging high rates and not being able to find a tenant.
Note that the Rust docs explicitly discourage using `then_some` in the manner described in this video.

https://doc.rust-lang.org/beta/std/primitive.bool.html#metho...

> Arguments passed to then_some are eagerly evaluated; if you are passing the result of a function call, it is recommended to use then, which is lazily evaluated.
Houston, TX has some covenant system which is equivalent to zoning but with a different name.
To be fair, the Linux/BlueZ stack is only vulnerable while the adaptor is set to "discoverable" mode, which should be rare, and should only happen when the user sets it that way, for a limited time.

The Android vulnerability merely requires that Bluetooth be enabled, and it seems that's the case for macOS/iOS as well?

And fortunately the Linux/BlueZ issue doesn't even require a patch to fix; you can just change a boolean in a config file and restart the daemon. I never thought I'd be praising BlueZ for something, but I suppose there's a first time for everything.
Experience the transformation you deserve at the best cost, with Dr. Ajinkya Patil at Clinique Internationale. Reclaim your confidence today!
> you Maximised income at about a 15% vacancy rate. So in an unregulated market driven situation you would be leaving money on the table if you did not keep reaching prices until you priced some people out.

That is perhaps the motive of massive collusion in rental markets around the US: A company named RealPage sold software to landlords that coordinated the rents they charged in order to maximize income, and the outcome was high rents, of course, and many empty apartments. (Essentially the landlords hired RealPage to organize their collusion.)

https://www.propublica.org/article/doj-backs-tenants-price-f...
It could make sense if you can inflate its tax value. If you can say you're losing $5000 a month (not that crazy for commercial) by renting it, and your tax rate is 30%, and the actual rent you could get is $1500, you break even.
Can they please just encrypt it client side and store it setverside with some key known only to me? For example, encrypt it with a key unlockable with my login password.

All cloudy stuff should operate that way really, to maintain the users privacy expectation which is 'this data is only accessible to me, not my government'.
> I disagree that unionization fundamentally sets interests of labor against their employer.

lol I didn't say anything close to that.

> You don't actually get equity in early stage companies; you get options on equity

Depends on the company, but it's the same alignment of incentives either way.

> not all landlords suck

Only the sucky landlords should have an issue with this legislation.
Maileroo is an email delivery service focusing on transactional emails. It offers features like real-time tracking of delivery, clicks, opens, and bounce rates. The platform includes free Email Verification API to reduce bounced emails, dedicated IP addresses for high-volume senders, and DNS Records for sender authentication. Maileroo also provides detailed reports on email performance, suppression handling for bounced emails, and supports both SMTP and HTTP Email API for easy integration.
> direct costs

> vs ""modern tech"" FOMO

Very tough decision, I'll need two MBA degrees to figure this out.
Yeah although like most things in exoplanetary astronomy, the relationship between metallicity and planetary systems is an area of active research with various not-totally-intuitive findings:

https://www.space.com/31456-rocky-planet-found-unlikely-star...

https://www.nature.com/articles/s41467-023-37195-4
I would be a lot more supportive of ChromeOS if it wasn't controlled by Google. It seems like it's mainly a vehicle to get students and others hooked on Google services and further normalize Google's brand of ad tracking and surveillance capitalism.
I'm still unclear on this: how is R&D not being an expense impacting the costs of a business?

Paying employees is a taxable expense.

Buying supplies is a taxable expense.

Paying rent on office space is a taxable expense.

Seriously, what is the R&D cost that is no longer being treated as a taxable expense?
They generally are more profitable though. The dev costs are tangential to the revenue and expenses. If you spend $100 building your app and earn $100 that year, you can still sell the app next year. Perhaps you still need some dev work to maintain it. But it’s misleading to suggest you earned 0 profit. That dev effort is going to apply its value to the company over time.
I’m assuming the poster misspoke and meant that metal-poor stars have formed when the universe was relatively young, not that the stars are young. It’s also my understanding that a planet such as ours could only have formed a bit later, after enough supernovae had formed all the carbon and iron and so on that we need to live.
>> continuation /kən-tĭn″yoo͞-ā′shən/

/kənˌtɪn.juˈeɪ.ʃən/
It's pretty much iMessage.
> your lawyer gets to argue why it's not valid

What if you can't afford a lawyer?
I am imagining an authentication system that doesn't just ask you for a password but beside making sure it's you who made the request, also makes sure that you request the access on your free will without being forced.

A primituve one would be requiring a main password to authenticate every 12 hours. If the main password is not used until that period passes. A second password that you don't memorize can be used to unlock but it is stored in a place that only you can access and only if you are totally free.
I was pretty surprised to see that Linux/BlueZ is only vulnerable under a very specific, rare situation. And fixing it for that situation doesn't even require a patch, just a small change to a configuration file. BlueZ (and its related GUI tools) otherwise is a usability nightmare. At least it's decently secure?
I don't see the controversy? If the effort you put in is "good enough", then the rewards should also just be "good enough". The biggest rewards should go to those who strive for them. People who's approach is to do as little work as they can get away with should expect the company to pay them as little as they can get away with, and everything scales up from there.

Side note, I'm not in the United States and I understand that the employer-employee relationship is more adversarial there. So I'm only going off my experience in the workforce.