skysight-inc/HackerNews huggingface dataset:
tl;dr

This means that any process that runs as the low-privileged user session can simply ask DPAPI for the credentials to unlock the vault, no questions asked and no PIN or fingerprint prompt required and Windows Hello is not even involved at all. The only caveat is that this does not work for other user accounts.

Yikes

Bitwarden has since made changes to their codebase to mitigate this particular scenario, which we will quickly summarize in the next section. They have also changed the default setting when using Windows Hello as login feature to require entering the main password at least once when Bitwarden is started.

Phew

Props to the security researchers for finding this bug! It's great that we have the infosec community to help protect us. Feels like one of the few industries whose monetary incentive is to help the public.
I mean, that is basically JSX is it not?

I agree with your points, however. How the W3C has not come up with a good solution is beyond me.
Probably not, most devices have the first stage boot loader on read only memory that is locked using an e-fuse. You would need to physically modify the device to change it.

FWIW, I had an older Fire tablet that I had loaded Android onto and it wasn’t great. It would crash randomly and the battery life was awful. These days I have a newer Fire tablet. It’s a few years old now but I still use it all the time for reading e-books from the library, and I have a few Android apps loaded onto it that I use for working on my car and they all work fine. In other words, there’s not really any reason to reflash them, the stock OS is fine.
There is an element of whimsy in most of what he lists, and whimsy can easily be boring.
No, I was just saying what he said was ridiculous.
On the otherhand, I think you could argue that it is something to strive for in more systems.

The longer our devices can last the less ewaste we generate. It may not be the easiest to secure, but it isn't impossible.
Of course rare books are valuable. The point is that if you want to buy a physical book you probably will pay $10-15 more for the nice version. The market for the cheap entry is smaller.
Fantastic.. up until recently cybersecurity was somehow immune from that junk and it was primarily in code development.. I believe the real problem in here is the ethics rather than AI itself, although AI is making it easier for those “scammers”, used to be in crafting an email for phishing, to a site UI, all the way to bug security report, as long as it looks “legit”, then it should pass!!
That's a great title. I love how they've encapsulated judgment, jurisprudence and execution in a single sentence! Mastery of "journalistic" hangfolken. hahahah :)
Interesting! Do you have an email or way to get in touch by chance? I'd love to connect and ask more as I'm both writing a book and considering trying to build some stuff in this space. Alternatively, I'm at jb2956 at georgetown.edu!
In the article:

> After disclosing the breach, 23andMe reset all customer passwords, and then required all customers to use multi-factor authentication, which was only optional before the breach.
Cats aren't really natural in all the environments we bring them to. And they're also subsidized to hell by their owners, if we weren't feeding them tinned food there'd likely be a hundred times less.
But that's not what artificially inducing means.

London for example have buildings which are prohibited of having parking (or getting street permit). Providing an option not pay for parking space when buying an apartment is not that.
Absent free trade, China still has all the experience and expertise they have acquired up until now.
Post a link to your book here as well. I'm intrigued to see what it was about.
It's pretty nice in my experience, dude. But I don't live in a city so it's more of a necessity and none of these downsides are really an issue - which is sort the entire point.
It's a very low effort way for him to make money, $500 to record a 1-5 minute long personal video, or even more for "business" videos, $10k/video + $2,5k-$12,5k for license depending on duration
Are roads the biggest driver of ecological destruction?
> “Therefore, the incident was not a result of 23andMe’s alleged failure to maintain reasonable security measures”

In all honesty, you can hardly make this claim unless they properly communicated and mandated (at least in writing, since I can't imagine how it could be actually enforced) that users chose/pick passwords different from other platforms. Or at the least enforce an aggressive password change schedule, etc...
Italy divided over new pineapple pizza
Or NetBSD drivers via rump:

https://github.com/rumpkernel/wiki
It appears to me that if you are part of a service where people can book you to say and advertise whatever they want, including scams, and you do absolutely no checking of what you say there, that sounds a lot like you are running a service for scammers, and "I didn't know what I said there" should not count as a good justification.
Returns to investors are the only reason the company exists.
A bit like “XYZ considered harmful”. Sounds so awkward to me but people seem to love it
Grim, but neat! You might consider leveraging an actuarial table of life expectancy by age[0], rather than hardcoding it at 80, since you're already doing the necessary age calculations.

[0]: https://www.ssa.gov/oact/STATS/table4c6.html
Most of the people I know who run Windows personally (not at/for work) either do it only because gaming's easiest/best there, or because it's easy to get free or extremely-cheap used Windows machines that'll hold up for a year or so (then get another when they break) [EDIT] And actually that last category's a single person I know who's a writer, so wants a laptop with a keyboard but only uses an old word processor on it, and email, nothing else.

Exceptions are my relatives over age 60, who barely do anything with their computers and should probably just have Chromebooks or iPads + keyboard (god, they could really use the accessibility features...), but are used to computer = walk into Costco or Best Buy and buy a desktop tower.

Most non-gamers who also aren't computer nerds, whom I know, "compute" mainly on their phone anyway. Shit, so do I, and I'm both of those—my Windows machine is just for gaming, nothing else whatsoever. 95+% of everything important that needs some kind of computer, happens on my phone. I bought my last house on it, entirely, LOL.
What's sane about swapping type safe, offline capable frontend code for spaghetti htmx/hotwire code?
I'm surprised that not only is there no application firewall for any of the BSDs, there doesn't even seem to be any need for it. There is OpenSnitch, but only for Linux.
> In the case of an outright revolution you're mostly correct, although i would argue that having guns legal and prevalent before the revolution makes it much much easier for them to be bought out of a van in an alley. If guns were illegal beforehand then the van method requires either making them, which is usually subpar, or smuggling them in from another country, which is risky. Having a large number of them locally available and just around means they can be easily repurposed or acquired.

Myanmar is a case in point. There's currently an armed rebellion against the the military dictatorship there, but (at least a few years ago) is was hobbled by Myanmar's strict gun control laws. IIRC, when the military started shooting protesters, they sometimes tried to resist with single-shot hunting rifles, but were predictably beaten. An NPR story I heard a few years ago described how they were trying to smuggle stuff like AR-15s from Thailand, but the quantities were so inadequate the protesters-turned-rebels had to train with wooden mockups.

This looks like a more recent article on it, and it sounds like things are getting better: https://asiatimes.com/2023/05/myanmar-pdfs-getting-the-guns-.... However, I bet the rebellion would be farther along if Myanmar had a healthier supply of privately-owned, capable guns to draw from. Here's a quote:

> Over the dry season months, [Myanmar Air Force] jets and helicopter gunships ratcheted up the tempo of daily strikes which in addition to supporting the regime’s embattled ground troops also deliberately targeted villages, clinics, churches and even camps where hundreds of thousands of internally displaced people (IDPs) have sought precarious refuge.

> But for all the publicity and outrage they have drawn, the [military government's] Russian-built Yak-130 jets and Mi-35 gunships were not in fact the most important killers shaping the course of the conflict in recent months. That lethal accolade should rather go to the humble assault rifles and grenade launchers now turbocharging resistance across the flatlands of central Myanmar.

> Over the past five months of this year’s dry season, an accelerating proliferation of automatic rifles and other small arms seldom seen in 2021 and 2022 has wrought a striking if virtually unreported transformation of the war.
The first picture on the page is the editor, and dammmnnnm wowwww. From it's bullet point:

> Diagram Editor: A drag-and-drop interface to combine Nim apps into scenes. Fork and edit existing apps like "OpenAI image", and "Text overlay" to suit your needs. Overwrite all fields with inline code snippets.

This looks really slick. It feels like it must be a huge effort! I wonder what they used to build this. Is the editor written in Nim?

What do you run once you write a scene: a runtime similar-ish to the editor but with a presentation mode, or does it spit out a new Nim program to run the other nim programs? Do apps get once-off invoked or is there persistent communication for apps to keep running? What triggers a frame to start, how does composting happen?

I feel like they've built a very cool generic flow-based programming system here, that happens to be used for smart frames.
> This is where institutions like universities, governments, etc. come in.

Science was doing pretty well before it became institutionalized in the early 20th century. It's not without tradeoffs, but these aren't essential components.
> I don't think Yunus is totally clean, but I also don't think he's in the same league as the other guys you mention. It's virtually impossible to be honest in Bangladesh. I don't think you can run a big business like Grameenphone without breaking a lot of laws and paying a lot of bribes.

Hence why I compared him to Shinawatra. His rise in Thai politics was similar to Yunus - US educated professor from a rural business/zamindari family who became an entrepreneur using political connections and later entered politics on a plank of being a reformer fighting for the poor.

The fact Yunus uses BTP Advisers is a big red flag for me, simply because you only use them if every other PR and Lobbying firm like Edelman, Ketchum, and BGR Gabara rejected you, which means you must have some severe skeletons in your closet.
Do you by gulf stream have a facility at Farnborough? Could be that a lot of flights are just for maintenance/test purposes? Not sure if there is a breakdown of passengers/plane by Farnborough-Farnborough flights and Farnborough-Elsewhere flights.
> Such information would only be available if plaintiffs affirmatively elected to share this information with other users via the DNA Relatives feature.

I'm skeptical that 6.9 M users opted-in to an off-by-default setting. That seems absurdly high for any opt-in feature that involves nebulous user value. I don't use 23andme, but I'd love it if someone had screenshots of this supposed "opt-in" before the data breach.

Also, how far does the sharing go? How far removed from a family member does a user have to be to see their info? Going from 14k to 6.9M seems like it must have been more than just immediate family, given the small family size common today.
Even if they didn't want to do 2FA for whatever reasons, there are things they could have done like checking password hashes against breaches.
You don't want these optimisations to be on by default.

Trimming can cause bugs when your program or one of its libraries relies on reflection and Native AOT is good for startup time (FaaS), but tiered JIT will likely outperform it in long-running applications.
>There are no downsides to being conservative until more evidence is acquired.

That's true, but one upside here is that this is not from the guy at Rochester who already got burned twice for publishing false superconductor discoveries. This is at least a report that can't be dismissed immediately.
11k people due to credential stuffing is not a dent in the 6+ million though. It's a disingenuous argument.

Not only that but they're should have been far better protected against even poor password management by users given the type of sensitive information they're handling.
>“ 23andMe knew or should have known that many consumers use recycled passwords ”

How would they know this?
Pretty much, browsing LinkedIn is the most agonizing experience I had in social media.
Often on discussions about 2FA and IP address checks on HN, there is a sizable contingent that is frustrated with how ever more security impacts how they want to use the product such as people wanting to be able not to own a smartphone while still doing online banking or using their credit cards overseas.

Add in all the people who struggle to use 2FA of any kind. At my first employer, I was there when they implemented it and it basically destroyed an entire week of productivity as so many people struggled to grasp how to set up a token in the authenticator app and use the token. I would be curious to know what the stats are on how 2FA impacts use and churn of users.
A service that handles sensitive personal data should absolutely have mandatory 2FA. Calling anything else “reasonable security measures” is laughable.
That is so sad. Here in North America (with the odd exception) we don't even have a choice. Its the car only. The only good thing about a car is autonomy: you leave when you want to leave, and you have control of the environment => no noisy cell phone chats and you can choose whatever music you want to listen to or not.
> getting scripts is simply bad, and getting plain old documents is simply good

This isn't that simple IMO. On one hand, JS-heavy apps take longer to load on underpowered devices and slow connections, which should be treated as an accessibility concern. On the other, approaches like LiveView, HTMX or even plain old HTML struggle on high-latency or spotty connections. A well designed SPA can cache data locally and push changes whenever internet connectivity comes back, making it feel a lot snappier in these situations. SPA apps are harder to write because you have an extra API layer, but you need one anyway if you're also writing a mobile app, so they may even become slightly easier in that situation. Every solution has its tradeoffs.
Handguns must be stored in a locker at the shooting range, I believe. You’re not allowed to take them home.

Farmers can keep a shotgun for pest control, so it’s not a total ban on all home ownership of guns. But there is not seemed to be any legitimate purpose for owning a handgun in your home. Ditto an AR.
Aircraft design and build has a very long lead time. It's plausible that Boeing success in the early 2000's was the result of sound decisions and long-term planning that were made early on. The emphasis on immediate shareholder returns you get from squeezing R&D or QA would take a long time to manifest itself in the actual product.
Big O notation is a description of algorithmic complexity, not “data structures” and it definitely isn’t trivia. One of the two biggest pain points I’ve dealt with with new devs (even experienced ones) is that they ignore time complexity and write god awful slow code.

(The other is adding network requests, eg database calls, in loops)
Is this another PR article for Toyota that keeps hanging onto the idea of using hydrogen cells for everything?
Trump's MO is to "make a deal" where we actually lose out but he gains face with his supporter cabal.

Biden has literally said that we would defend Taiwan. China doesn't want to risk defeat. With Trump they know they can make some sort of weird deal to essentially get the win. It's not like the military would operate any differently in a conflict, the Pres barely influences their plans.
Dunning-Kruger has been found to be an artifact of bad statistics[1] and self-correlating variables hidden in the chart. Fortunately for you, you likely have a general idea of what you know and don't know. The balance between the two extremes of "knows nothing but fakes it" and "knows nothing but thinks they know everything" both start with "knows nothing".

Being humble and honest about what you know and don't know (and not putting on a show you think people want to see) is the best remedy. This is unfortunately at odds with how most corporate workplaces reward people for their diligence - only loud, bragging diligence seems rewarded.

Being wrong and not knowing something is OK. We all have blind spots and biases. This is why teams can be effective, because we can see each other's blind spots and biases and help make sure they aren't an Achilles heel. But it all starts with humility.

1. https://www.mcgill.ca/oss/article/critical-thinking/dunning-...
That's a good point. I'm already in the process of using voice synthesis to narrate one of my books. It is still a huge time outlay to get to the quality bar I want, but much cheaper than paying for a narrator.

One thing working in favor of human narrators is the fans. Audiobook listeners can get very attached to certain voices, to the point where they'll read _anything_ that narrator works on regardless of the book's author or genre. If I had the budget for it, I'd definitely favor a well-known human narrator over AI for the visibility aspect of working with that person. But most authors don't have the budget to hire popular narrators, which is where less popular or entry-level narrators may find themselves losing work to AI alternatives. The narration quality is still higher with competent humans at this time as well, but that'll change.

For translations, I don't think I'll ever trust AI entirely (just like I don't trust myself as a human writer entirely!) I'd still be hiring a native-speaking human editor and proofreader if generating AI translations. Or more likely, I'd be hiring a human translator who is able to charge competitively by using AI in their workflows (and is also able to handle the quality checks etc for me).
> Neighbors keying each others cars for taking up a space for too long.

I don’t know how this is the fault of too little parking. Nothing excuses this type of behavior.
My mom pipetted by mouth in grad school in the 50s, doing radiochemistry.
Unsupported devices can always become somehow supported and enabled. To harden computer, you remove WiFi cards, cut on-board antennas, desolder mics and speakers, desolder USB ports...

I did that for computer that was used to sign bitcoin transactions offline. User typed hashes manually...
What you describe are relatively niche or uncommon uses of these algorithms and data structures. Further, the specific implementation details of a given algorithm become relevant in these contexts. Different implementations of a hashtable can lead to substantially different operational performance, and no textbook understanding (including the toy implementations performed as part of a CS curriculum, for example) of what a hashtable is will lead to the kind of understanding you discuss.
I think I have addressed that in the comment you just answered. There was a misunderstanding, and I tried to fix it.

I again edited the comment which lead to the confusion.
> "More than 40% of Azure are running Linux and OSS workloads, and most of its infrastructure doesn’t have anything to do with Microsoft software at all."

I wasn't expecting the ratio to be this high.
Knowing all the things that can go wrong, which is the easiest/lowest maintenance type of blind to buy?
FDA approves gene-editing treatment for sickle cell disease
That's east.
Isn’t the whole point of such a service to store your data? To make it possible for others (genetically) related to you, to find you?
Its not like they dont already provide this to police and governments without a warrant and sell the data. If you expected your most personal data to be secure with them you havent been paying attention.
By experience, i mean the whole UX - which is as much the interface to the LLM as it is the LLM itself, imo. Ie i'm not terribly interested in constantly telling an LLM what i want, prodding it to do the right thing, etc. I'm more interested in ways it can be easy and correct - even if that's limited in functionality. Ie perhaps automatically suggesting docs, knowing what style to use, etc.
That is a belief that emerged at a specific time from a specific place with a specific set of goals.

https://en.m.wikipedia.org/wiki/Shareholder_value
NIST Tool Will Make Math-Heavy Research Papers Easier to View Online
Preprints of scientific papers from physics and other math-heavy disciplines could become far more accessible with the use of a NIST-developed tool that converts formulas to a format easily viewable as a webpage.
I can't imagine any scenario where a company is requiring monthly travel and not reimbursing for it.

And even assuming 1 full travel day on either side, 4 days a month is a LOT less than 1/4.
> No, but is a point where 50 can park simultaneously and nobody who wants to park there and can afford to is denied that ability.

That sucks for the people who are denied the ability to park there because they can't afford it though. Telling people that they need to walk miles to get to a doctor or a grocery store and that only the wealthy deserve to have access to 90% of the city doesn't seem like a good idea to me.
Honestly, the thought that looking into a monospaced font for the rest of your life is a horrible way to spend your life and that there's something inherently better to do seems like a deeply flawed thought.

Of course, you can be spending time with your loved ones. Or, you could be jumping out of a plane with a parachute.

But, whether you're doing an extreme sport, being with your family, or just staring into a terminal, your mind is exactly the same.

If you're unhappy, you'll be be just as unhappy spending time with your family as you are spending time staring into a terminal.

If your happiness depends on where your body is or who you talk to, you are bound to spend life suffering (as most people do I suppose).
59 kg 190 cm 33 old

any suggestion?
Side note, one of the first commercial games written in .NET used OpenGL, released in 2004 long before XNA.

It was a RTS game and quite cool, Arena Wars.