skysight-inc/HackerNews huggingface dataset:
This guy is as much of a "cyber security threat" as your typical socially-awkward gamer teenager, of which we have plenty of. Every internet-connected server out there constantly gets probed by bots/tools often operated by similar people and nothing is ever done about it.

This guy's crime wasn't that he was hacking/phishing/stalking or the general obnoxious behavior that often comes with this kind of person - this is effectively decriminalized in the UK anyway, as long as the victim isn't a big, culturally-relevant company. Financially-motivated scammers and crime rings take advantage of this.

This guy's crime is that he embarrassed the establishment, so he has to be painted a much scarier monster than he really is and made an example of, since the truth that most technically-inclined, socially-awkward teenagers would be equally capable of such hacking would be hard to accept and put into question the competence of the affected companies.
It would also be incredibly politically blind to not identify the effects of Putin declaring to the Duma that he wants to rebuild the USSR. [0]

Similarly, it would be naive not to identify the influence of petro-funded Wahhabism spreading Jihad throughout the Muslim world. [1]

Another political alignment which somehow missed the conversion is the one which today, in December of 2023, prevents Maersk (and the rest of the global economy from sailing through the Suez canal) while Moscow's tankers sail through with no issues. [2]

[0] https://www.bbc.com/news/magazine-26769481

[1] https://en.wikipedia.org/wiki/Wahhabism

[2] https://en.wikipedia.org/wiki/Russia%E2%80%93Yemen_relations

[3] Let's skip the CCP for convience
Offering a tip made GPT-4 explain more
I assumed cube2222 meant where soft-delete wasn't universal: so you might really delete the parent row but want to soft-delete the child rows. Though I would suggest this is a bad idea: if you want to soft-delete child rows you should enable it on parent rows too.
It's because generally I do like their product at a $6/mo price point. It's leagues better than FM radio. I just don't like their billing/promo practices and so these are the tricks to protect yourself as a consumer.
A Soviet one, to pedant it up a notch.

Edit: Also, I don't really know whether Kenarov is in any way Jewish but it's not hard for me to imagine someone using the term satirically but not intending to (at least, not strongly) evoke its antisemitic aspect. I don't think that really works in English and aimed at a Western audience but people do irony-recycle the old slogan tropes quite a bit and it's a linguistic theme throughout the piece.
Indian government must withdraw the Telecom Bill to protect fundamental rights
You can view the entitlements from the extracted ipa by using the codesign tool. So it is totally possible to see if an app has this entitlement.
Yes, Hamas is doing that! They keep the hostages, and hide in tunnels not letting the civilian population to shelter from bombs in there. They prevent movement of civilian population out of the danger area, they use humanitarian areas for launching rockets, they are using hospitals as their command centers and for keeping hostages in them. Yes, they are the ones "flattening cityscapes". And they, again, refused a ceasefire offer yesterday.
That sounds awful. My first instinct would be to see where an FK constraint would fail, and then ask the business what it should be. There is no guarantee that every business case from way back needed an FK, or that anyone in the business knows which FK value should be there. It sounds absolutely miserable.
Maybe what happened to Intel is what happened to GE under Jack Welch.
Edit: just saw the CFO put in charge reference in other comment. There's your answer: financialization of the company.
There is an expectation here that this person will react to being arrested and imprisoned with patience; yet patience is not expected from literally anyone else involved.

It's abundantly clear that he is not being punished for harming people. He is being punished for not playing along. "Refusing to play along" is one of the most well known symptoms of Autism. This person is being punished for neurodivergence. I'm not even remotely OK with that.
Nothing. They got great publicity out of this. They also got Apple under serious additional scrutiny by Congress. Beeper Mini the product never had a chance at actually being successful, so I think this is about the best outcome they could have ever hoped for.
Curious to know who patented this. LG has strong licensing rights on OLED, hence the Samsung branded QLED. It'll be interesting to see if display manufacturers try to purchase the rights to new display tech.
The complexities and capabilities in the Chinese(well, most asia) mobile market are remarkable.

I always find it funny when people boast about how great certain things are in the US without ever have traveled to HK, Singapore, Tokyo, Beijing etc...

Most people dont realize just how entangled mobile life is in Asia, way more than in the US.
Why do you want to use Next.js if you already have a FastAPI backend?
My DivestOS supports decade+ old devices and provides monthly security updates for seven versions of Android, no other project does this.

GrapheneOS has good reason to only support Pixel devices, they consistently do the right thing with regards to relocking, verified boot, CFI/SCS support, strongbox support, and even now MTE support.

Many other devices fail to support these, eg: https://divestos.org/pages/faq#kernelCFI

Even the FP4 shown in the article is fundamentally broken and trusts the AOSP public test-keys for verified boot: https://divestos.org/pages/faq#deviceBootloader
That is great and I noticed it’s something I have always assumed should be the case - no indirect access to the database outside your application / ORM. Because then you open a can of worms.
shouldn't they at least try to use this kid for good instead of locking him up ?
but then who know maybe a 3 letter gov agency will take him to a bunker somewhere
Someone should hire him as a white hat. Maybe they have some kind of custodial guardianship where the employer can monitor him staying clean.
I don't see violent crimes as necessarily the worst. Crimes that steal from large numbers of people are arguably worse than many types of violent crime due to the sheer magnitude of lives that got destroyed. If you destroy 10,000 regular lives through fraud you deserve the worst punishment in line with murderers. Although this guy's long sentence isn't only because of what he stole from Rockstar, my commentary is not only about him, it's more of a broader point.
BBC's actual headline: "Lapsus$: GTA 6 hacker handed indefinite hospital order"

The editorialized reframing of the headline is a bit subtle but still incredibly dishonest. An indefinite psychiatric order is simply not the same as a life sentence.
Cosmopolitan is a nice hack but I'd never use it.

I really don't see the point, cross-platform software with multiple binaries is absolutely fine. I've shipped cross-platform software and it's a one time trivial cost to prepare a multi OS pipeline. The actual problems come from dependencies and I'm sure you'll have to solve the same problems with cosmopolitan.

Llamafile is another hack I'd never use - why limit myself to the models supported by llamafile when I can just install llama.cpp? (the web interface is also part of llama.cpp https://github.com/ggerganov/llama.cpp/pull/1998)

Moreover, people with GPUs will likely want to use something with better performance than llama.cpp (gptq or exllama2)
Beeper says in the article that they'd be willing to pay Apple for use of their resources.
It kind of messes up the functionality.

If you have all iMessage users, then you can do things like add more users to the chat, etc.

As soon as one Android user is in the chat, then you can't do that.

The other issue, for me, personally, is that I can respond to my iOS users from my desktop (where I spend most of my time), but I have to actually pick up the phone to communicate with my Android friends.

It's not the end of the world, as my Apple Watch tells me when I get texts from my phone, but it is a bit annoying.
In what world do you live in where getting too many parking tickets and causing violence gets you life in prison until an unknown paid state employee decides you took all non-necessary meds and drank the kool-aid? If someone was killed they would get out a certain date. The judge should have to suffer the same fate before he can order this.
Here's the thing: cities don't provide social services in order to attract the homeless from surrounding areas. That would be nuts. Who wants to be a homeless magnet? Cities provide services for the homeless because they already have a critical mass of "homegrown" homelessness. This may attract some from surrounding areas, but the critical mass would exist regardless, due to economic conditions in the cities.
Sorry if I was unclear, that's what we did in NYC and are doing again in Buffalo. The blog post is actually from the previous Bellevue announcement.

Edit to add this link to some footage: https://twitter.com/dmitri_dolgov/status/1489318507342807041
FWIW: QLED is LCD garbage. QD-OLED (also Samsung) is state of the art.
Yeah and you should be more careful too. Lots of weirdos out there. You’re welcome.
And has no empathy, which makes him a lot more dangerous.
As another person said, this has become standard practice for me. It's less about doing business with shady companies and more about insulating myself from shady practices. I've had a few cases where I've been on a plan that suddenly changes with only a few day's notice, or I get "graduated" to another tier because the previous one is going away. In all cases, I was charged more money than I initially agreed, and the virtual credit cards saved me.
I would say he's not in trouble for gaining access to systems, it's for extortion:

> He worked with Kurtaj and other members of Lapsus$ to hack tech giant Nvidia and phone company BT/EE and steal data before demanding a four million dollar ransom, which was not paid.
The catch was they are betting multiple farms. One farm for crypto, another farm for AI, and I'm sure they'll have another farm for another hyped technology.
Right, each side is correct within its own framing of the issue, they are both right according to their own separate standards. Both sides are villainizing the other side, and you’re right: they don’t have to. It’s not necessary to say the other side is wrong or immoral. The problem is that in many ways it is pretty effective rally & argument strategy, at least locally & temporarily; it does help some people who mildly agree with it to cement their position and have dramatic talking points that spread.

How do we break the cycle of increasing polarization? I honestly don’t know. It seems to be happening not just for abortion but for everything. All policy and culture, even innocuous stuff, seems to be getting polarized and tribalized in service of the politicians. Rejecting the extremist and villainizing framings of the opponent, on both sides, might help. Listening to and accepting the other side’s reasoning often does wonders for having civil conversation. I like to think of political debates as simply prioritizing what we want, and I wish our political debates would stop name-calling and just evaluate and rank the priorities rationally. This is hard to do though, it takes a lot of work, and there are conflicting priorities. Yelling and polarizing is way easier, takes less work, and is helping some politicians get what they want without having to be polite to their opponents or spend time evaluating their arguments. Maybe it would do some good if we can just help everybody we know see that our debates are mostly making us all tools of the politicians?
Foreign keys allow for pushing a really vital piece of business logic down to the database itself, referential integrity.

This can be done in application logic, but that risks bugs allowing broken references into your data. Its more foolproof when these checks are enforced directly at the db, making sure data is valid before it's stored or updated.
I did 100% pair programming with a team that didn't standardize on editors or keyboards. We solved the issue in the article by just never using each other's machines. It was very rare that the navigator would want to type something but if they did, it was usually just a line or so, so we would "strong" pair, ie, tell the other person exactly what to type. If we wanted to switch the driver/navigator role, we would just make a WIP commit, force-push, then pull and `git reset head^`. It was only ever two people working on a branch at a time, so the force pushes weren't scary. We did this without issue for three years.
If we mistakenly think it will hit because "their calculations aren't confident given that large distance."
People focus so much on "cost" and "profit" that it seems to lead to short sighted decision making.
And with this change, I never want to go bowling ever again. Thanks, progress.
Cisco Acquires Isovalent
ok but then we are back to my point that there is no large battery capacity to deal with the volatility of wind. From what I can tell from gridwatch, LNG is what they fire up when there is no wind.
ah! thats a blast from the past. I maintain pg-osc (online schema change tool for postgres) and very much agree that FKs make OSC hard.
One of the dishonesties you see from nuclear fans is claiming nuclear is cheap because the operatings costs are low. This is somewhat valid if you're talking about continuing to operate existing plants, but unless you're given new NPPs for free by the Nuclear Fairy, it doesn't apply to new construction.
The Power of Paris Traceroute for Modern Load-Balanced Networks
If you duplicate data like mad, how do you ensure that the duplicates are in sync? If you avoid UPDATEs I could maybe see it working.
I know you said not to answer, but for everyone else, apps can already do this using the OS's native permission controls, as of iOS 13 with the "Allow Once" option and as of Android 11 with the "Only this time" option.
You have to recognize these as the right-wing dogwhistles that they are. The idea that autonomous driving and vehicle electrification are control strategies by an oppressive deep state are constantly pushed on far-right social media.
So it’s really more like a physical rubber stamp of sorts that you can scale up or down but that will otherwise always look the same?

I also know very little about this and the “brush” denomination really confuses me.
Like sure, it is technically possible he runs termux, has all of his hacking tools available, and is amazingly good with an onscreen keyboard.

That being said, if this were an episode of CSI, I would be rolling my eyes.
By soft deletion, do you mean you would want to ever re-instate the record and make it valid again, PK/FK constraints and all? Or tracking deleted records? For the latter I use audit tables + triggers to track the changing values.

At a basic level you could duplicate the entire record into the audit table on every action, e.g. the audit table would look like `audit_id | record_id | user/process_id | action (insert, update, delete) | timestamp | ...<record rows>`.

You can optimize it to not duplicating column values unless necessary. On inserts you only need the metadata of the action. On updates, the old value of columns with changes goes into the audit table. On deletes the whole record goes into the audit table.
Is it possible to send and download documents as non-pdfs? I’d love to avoid the hellish pain that is pdfs
Personally I find that if I read something that I enjoy, I’ll usually find a way to incorporate it into my life somehow. For Stratechery and information economics in particular, it’s been finding ways to leverage my skills to make myself indispensable professionally.
Title should be "Do you really need Foreign Key constraints?". Foreign Key is the field itself, will still be there without the constraint.
>Whatever number Tesla says will be their cost.

There's no number. They won't have to pay Tesla a dime. It's an open standard now.
It woudl be odd for the court to resolve a copyright infringement case by more copyright infringement. It's not theirs to put in the public domain; it's the Tolkien estate's IP.
all those homeless is incredibly generalizing, there's many reasons to be homeless. but the top ones are drugs and mental illness.

many are drug addicted, they would have somewhere to go but they opted out of society (well, they aren't in the forest so not full opt-out)

but yes a combination of state run rehab / mental hospitals seems to be the only solution, but is it done by force?

if it's not forced you'll have a hell of a time getting people to go. if it is, you are now rounding up potentially unwilling people and shipping them to a facility.
Why do some phrases get on our nerves?
>> If he can even lie convincingly, he'll be out tomorrow.

Give the mental health pros a little credit. Getting out of a psych ward isn't as simple as saying you aren't going to do it again.
You want to change your location in every app manually, even when your device has a GPS receiver installed?
The baseline rate is a lot lower than 1% though.

The lower the absolute rate is, the less it warrants a ban. I'm not sure where I'd draw the line in particular, but also we need to consider how much can be prevented with mild use of safety equipment.
Precise location _is_ GPS, not the other way around.
Not just VR, but think AR wearables as well. This is accretive to enabling smaller power sources without sacrificing capabilities, thus improving form factors.
Sure, but GP stated wrt traffic patterns, "This is independent of whether the approach is IFR or VFR." which is not the case. For IFR, as was the case here, the LH was looking to execute an IFR approach, not ever enter the aerodrome traffic circuit.
Follow this advice with caution. Dropping foreign keys is effectively giving up part of the C in ACID. It should be done with very, very open eyes to the downsides. I'm not sure the author is selling the "when" side of this very well. Migrations are "hard" because the database is forcing you to handle correctness criteria that are easy to ignore. "Lock contention" is the database covering your sloppy ill-thought out application code from doing the Wrong Thing. Yes, of course, you take a minor performance hit in exchange for consistency, but how many of us actually work on applications where that trade off is the wrong one? Developers are frustratingly superstitious about scale and their need to do it.

The data will very likely outlive the application that created it. It's almost guaranteed to outlive your tenure on the team. Viciously guarding its correctness solves all the problems that not guarding it causes.
The podman manpages are more sufficient than the docker manpages.

To further illustrate considerations when adding caching to what are supposed to be reproducible [development / science] workflows,

GNU Make, for example, caches outputs according to their mtime. But, specifically, newer gen build systems like e.g. Blaze and Bazel do not use mtimes to cache build artifacts.

Container builders like `docker build` and `podman build` archives the filesystem after each Containerfile instruction completes; as layers named as a hash of the text of the Containerfile instruction e.g. hash(`RUN sh examplescript.sh`) -> "abcdef12342" which you can run like any other container image instance: `docker run --rm -it "abcdef12342" /bin/sh -c "find /"`

Caching implies additional test case parameters, debugging, and potential failure case unreproducibility:

"Flush the cache, Run it again, and Compare the output"

"Turn off the caching, Run it again, and Compare"

"What was supposed to have cleared the cache?"

"Why does it cache everything; how did the cache fill the disk?"
The mental hospitals were closed. Now the mentally ill are largely homeless or in prison.

They closed something bad and brought no alternative because it’s easy for a politician to score points by appearing to solve problems in the short term but providing no long term solutions.
> like Apple doesn’t let you change the group name for non-iMessage groups

SMS doesn't support the concept of naming a group. That's not an OS limitation.
I had no idea this feature exists; do PCs have this "feature" too?

Are we now saying a central authority can simply brick or forcefully install software on any mac at any time given only the serial number? What the actual fuck!?

Is this an OS feature or part of the "secure enclave" (Are macs entirely useless now or can you install Linux and still trust the device)?
> So yes, this is a HIPAA violation when it is being used by the police. I work in this space with HIPAA data.

It is not, because HIPAA includes an "official/governmental purposes" exemption. See exemption (5)

https://www.hhs.gov/hipaa/for-professionals/privacy/laws-reg...

> Required by Law. Covered entities may use and disclose protected health information without individual authorization as required by law (including by statute, regulation, or court orders).29

> Judicial and Administrative Proceedings. Covered entities may disclose protected health information in a judicial or administrative proceeding if the request for the information is through an order from a court or administrative tribunal. Such information may also be disclosed in response to a subpoena or other lawful process if certain assurances regarding notice to the individual or a protective order are provided.33

> Law Enforcement Purposes. Covered entities may disclose protected health information to law enforcement officials for law enforcement purposes under the following six circumstances, and subject to specified conditions: (1) as required by law (including court orders, court-ordered warrants, subpoenas) and administrative requests; (2) to identify or locate a suspect, fugitive, material witness, or missing person; (3) in response to a law enforcement official's request for information about a victim or suspected victim of a crime; (4) to alert law enforcement of a person's death, if the covered entity suspects that criminal activity caused the death; (5) when a covered entity believes that protected health information is evidence of a crime that occurred on its premises; and (6) by a covered health care provider in a medical emergency not occurring on its premises, when necessary to inform law enforcement about the commission and nature of a crime, the location of the crime or crime victims, and the perpetrator of the crime.34

> Essential Government Functions. An authorization is not required to use or disclose protected health information for certain essential government functions. Such functions include: assuring proper execution of a military mission, conducting intelligence and national security activities that are authorized by law, providing protective services to the President, making medical suitability determinations for U.S. State Department employees, protecting the health and safety of inmates or employees in a correctional institution, and determining eligibility for or conducting enrollment in certain government benefit programs.41
I had a similar experience when I had a trial with my previous car.

I got the calls to stop by changing the phone number on my account. For e-mail/physical mail, there was an opt out that I found and to my surprise, they actually stopped.

But yeah, it was ridiculous. I'd get mail a minimum of once a week asking for me to come back. So much wasted paper.
49 states have prescription drug monitoring programs (PDMP) that automatically send reports to law enforcement.

https://store.samhsa.gov/sites/default/files/d7/priv/sma16-4...

California's implementation is called CURES: https://oag.ca.gov/cures
I find it a pretty optimistic take when someone claims success of a safety system after conducting a test that basically equals 600 people using it for an average year worth of driving…

Is it enough to support a pretty extraordinary claim that a fully self-driving system that will then be sold in millions of vehicles is now perfectly safe?