skysight-inc/HackerNews huggingface dataset:
Windows networks are notoriously bad about this. If you find yourself on a Windows network, either because you found an active ethernet jack in the lobby, or you get on the wifi, phishing, or you land on a citrix box or whatever, you can run a tool called Responder.

Windows machines on a network are constantly scanning around, looking for new devices, and when they find them, they like to see if they can access them so they show up in network manager or whatever. They do this by trying to log in. Obviously logging in with a password would be insecure, so they try to log in with a hash. Responder pretends to be any sort of server that a Windows machine would try to log in to, so right when you run it, all the nearby machines hand over their hashes.

Crack even one of those hashes, and now you can log in to Active Directory. This will let you get the full list of all users, permissions, groups, machines, and sessions, etc, and basically tell you exactly what you need to do to get anywhere you want (Bloodhound is the main tool people use for this).

That AD account also lets you dump all the SPNs (service accounts) on the network, and because Windows is Windows, of course that gives you something like 20-30 password hashes, many of which are almost certainly Domain Admins on the network.

Crack a Domain Admin account, and you can basically do whatever you want on the network, including doing a dcsync, which is normally used to back up a domain controller, but also dumps every account and NTLM hash straight into your lap. These hashes can be used with pass-the-hash to impersonate any account, or you can just crack them and basically have free access to the network for the rest of your life.

The entire security of Windows networks is based on the premise that password crackers don't exist, which is why they have been fundamentally fucked for decades, and there's zero chance that any of this will ever get fixed.
Immigration is driving the nation's modest post-pandemic population growth
Waiting 18 months is no excuse to steal something that isn't yours. It's not a justification it never was and never will. Your actions are immoral and wrong whether you wait or not. It's just something you tell yourself for comfort. Some sort of assurance that you're not immoral despite your obviously contrary actions. Will actually buy the thing after 18 months? Let's be real. Is stealing something and then buying it 18 months later is a crime for anything else except torrenting? Why don't you shoplift and then buy it 18 months later?

Personally I don't wait. I torrent the thing straight away because it's free and I'm a greedy human being. There's certain lines I won't cross but torrenting isn't one of them. Physically shoplifting something is just some weird thing I don't do because I'm an irrational human being. I torrent but I don't shoplift because I'm illogical, like the way many people are. But unlike most people, I don't have to make up some BS story about why one is more justified then the other. I can recognize my own inconsistency and I can live with it.

I wonder why people have to justify it for themselves. Like why do we have to make up stories?

Take for example global warming. I drive a car to work because I'm a self fish person and I care about my commute being convenient more then I care about the world. I'll just let the rest of the world take action to save it and I'll just drive a gas guzzler until it becomes inconvenient to do so.

The thing that gets me is I feel 99 percent of the world is like me. But They have to make up some flimsy story that justifies their imperfection to sort of morph themselves into human paragons.

If ifttt was free I would use it. If it's not there's no advantage to me at all and I won't. It's all about my advantage and I really don't care about the company. That's how it is for most people and that's why people on Reddit are angry. But I'm positive the people on Reddit have to spin some story to justify it for themselves.

A bit of topic here, maybe, but I'm curious as to why we have to spin it. Maybe it is relevant if there are tons of people on this thread trying to "moralize" the whole thing and justify their actions and viewpoints. But my question is essentially this: Why can't most people just tell it like it is? Why can't we be honest with ourselves?
In these investigations the authorities are seizing peoples digital devices, which is routine these days.

It's about time operating systems actively stop generating unnecessary forensic data. When we delete a file, it should be overwritten with zeros, not just unlinked. When we clear browser history, it should be gone for good.

And many temporary files and other intermediate data should be stored by default in RAM, so when we power off the device, it is gone. When a device is seized it should not be possible to tell what the owner was reading or searching for. If the user wants to keep weeks of browsing history, that should be an opt-in choice.

Our devices should be working for us, not snitches or informants for the state.
Ask HN: Dystopian Sci-fi books that take place in San Francisco to recommend?
Looking to read some sci-fi. Anything that takes place in a dystopian San Francisco and involves hackers. Do you have any suggestions?
Still are. I can't believe how everyone complains about MS's setup flow but gives apple an easy ok to their iCloud nagging for which you need to edit globalPreferences to disable it. Or the messed up mouse acceleration, or scroll wheel acceleration, or the forced impossible to disable animations, or the terrible handling of full screen applications in combination with three screens(though ig this isn't an issue for modern Mac users, you can't even have three screens anymore).

Windows in turn has superior tiling, you can disable animations and you can disable OneDrive very easily. Borderless full-screen applications let you drag others across them and there's a lot more you can customize
What you say, plus the newer security schemes all have convenient side effects that end up fucking consumers over.

Consider, for example, banking apps: because 2FA via app being near-universal these days, even the web page doesn't let you use your bank account without installing the bank's app. And banks are, after MAFIAA, the biggest proponents of remote hardware attestation schemes. Thanks to that, we're reaching the point that phones that aren't locked down by Apple or Google are going to become useless. Mod/rooting scene already all but evaporated because of it - rooting your phone means fighting half the apps, including your bank, making the whole exercise not worth it.
See https://www.nature.com/articles/137996a0.pdf
https://abcnews.go.com/Politics/intelligence-report-warned-c...

The IC knew. The White House chose not to act on it. Probably related to the whole “more testing means worse numbers and that’s bad for me politically” pathology.
I think the bad writing, especially for AAA games is an industry brand/growth problem.

How many more people would play video games now if they could really see them as non-linear interactive Scorsese movies instead of more akin to the plots their kids are watching in cartoons?

Also -- maybe there's some problem with how we think about traditional stories/writing where the author fully guides the reader and interactive experiences like video games.

The best video game stories I have as an avid lifelong gamer are from the emergent story games like Dwarf Fortress Rimworld caves of qud, kenshi, etc where I really feel ownership of the story and its not the same as everyone else's story who played the same game.

If the story quality in an 50 hour more story driven video game was higher though, I might still devote time to do that stuff these days, but as it is I almost never play story driven games except a few indie titles a year.
Because people who really need the privacy can be identified. Ideally, you want to help them so that their browsing don’t stand out (so that their browsing and yours are virtually the same).
I don't use rsync. Because it's for synchronization and I don't really trust any of my storage drives to hold a perfect copy of data to sync from and act as an ultimate source of truth for connected, downloading clients. I especially don't really trust flash memory storage devices.

The only source of truth that is really reliable is a password memorized in your brain. Because keyfiles that can decrypt data can be corrupted, that is to say, they rely on a secondary data integrity check. Like the information memorized in your brain.
The only one of those appropriate for accessing actual hosts would be .test, and obviously using .test for non-testing purposes would also not be appropriate.
You can use a public domain but a local/private DNS server
https://archive.ph/zLQ8S
Tree-edit: Structural editing for Java, Python, C, and beyond
so, for example, an entirely internal zero trust network across all locations, should be .lan and not .internal?

.lan is so "back to office"
Perhaps even more crudely, something like "You claimed you crashed your car because the sun was in your eyes, but it was morning and you were heading west...."
> Whenever I ship I game, I immediately begin the race against time to write another game before our bank account runs out.

To be honest I don’t think I paid much attention to the “successful enough to justify continuing but not enough to be sitting on a pile of money that trivializes basic expenses” case.

I’ve got nothing but respect. I would be severely hamstrung by that looming anxiety.
No wonder learning piano or a any musical instrument changes the brain. It’s a complex immersive experience that requires focus, coordination, lots of time practicing..
I never understood how the wireless works. It seems like a weird mix of Wi-Fi and Bluetooth?
What? I can do this? Runs to the PC

EDIT: I cannot, I need to install ROCm to compile with it, and then install something called hipBLAS, and who knows what else.
If you think everything is fine, presumably that's because every metric you have available is indicating fine-ness. That's probably sufficient for most users. There'll be some edge cases, but the brief write-up in some obscure IT online journal should suffice to restore anyone's slightly damaged reputation regarding a torpid non-committal response.

I'd also assume if you're using Microsoft Teams it's because someone else has determined that you shall use it. I expect that any semi-informed, mildly IT literate Microsoft Teams user has a starting position of 'low expectations'.

Anyway, parent was suggesting an in-app message to indicate some issues, so my initial question stands - how do you expediently send an instant message to a user to advise them that your instant messaging app is having a bad day?
If what you consider evil is standing in the way of Marxist utopia, well bud, I think you have your moral heuristic exactly, murderously wrong.
Like it or not, but you are a part of a community here and there are both implicit and explicit rules that come with it. While I can only speak for myself, clearly you can see that plenty of other members took issue with your behaviour. Maybe they are all in the wrong? Maybe they are not? Maybe the truth lies somewhere in-between? It is ultimately up to us as individuals to decide when we make the decision to partake or not in any community.

Your comment history clearly shows that you have plenty of interesting things to say and contribute. It would (to me) be a pity if you decided to die on this (to me) weird, individualistic, "my way or the highway" hill rather than make minor adjustments. Still, that is, of course, your choice.

Regardless, I will move on to other threads at this point.
Wait ROCm support Ryzen APUs and still doesn't support dedicatedly GPUs like the 6700XT?!
The article is simply preaching to the choir. If you're dumb enough to believe C02 is bad for you then you're dumb enough to believe the reason is gardens.
Yes, often this is the case.

Fortunately, my manager agrees that work requests should be submitted via official channels (i.e. the appropriate project management / issue tracking system).

I have good communication with my manager. I regularly ask for their feedback about my behavior, and if they think I should be handling situations differently. I always take any suggestions very seriously and either do my best to accommodate them or discuss my concerns openly so that I'm not putting myself in a difficult situation.
It's tricky but there have been attempts at a normal peace deal like the Camp David Summit. But then the Palestinians say no. So instead you get the other stuff you mention.
Guess how many systems are using KDF algorithms in practice?
Was trying to find a way to reply to your comment about my book.

But yes, I wrote a scifi novel about a computer hacker and occasionally post it here. Calling me a "shill" for trying to promote my book seems harsh.

Have you ever tried to accomplish anything in your life? How would you suggest a new author gets their work outlet there?
Thats worse. Lets say you have a tonne of plastic.

Option 1, burn it:

Plastic burned release energy roughly equivalent to fossil fuels. Therefore, burning it displaces an equal amount of fossil fuels.

Option 2: landfill it

You still fossil energy so you produce it, but producing it is very energy intensive.

Also you now have a landfill filled with a molecular sponge absorbing toxins, breaking up into microscopic pieces and releasing the toxins elsewhere.
Meeting aggression with aggressive response is what leads to escalation. Escalation of conflicts between nuclear powers sooner or later will end with some unfortunate consequences.

Facing an aggressive Russian or Chinese regime, armed with nukes and more or less modern conventional forces doesn't leave a lot of options for Western politicians. Specifically Putin have reacted with raising stakes and escalation every time he's been challenged. If the other side reacts in the same way a nuclear war is inevitable. There is no magical "leadership" that can resolve complicated conflicts without taking enormous risks with the future of humankind.

The war in Ukraine was handled by the West politicians quite well IMHO. They supplied Ukraine with enough weapons and money to be able to free big parts of occupied territories and to stop any future Russian advances.
> Communications between country leaders were fast and reliable

Maybe they were fast enough by 1939 standards, but it seems that in 1960s communication between Moscow and Washington was considered to be "not fast enough". Quoting Wikipedia article on Moscow–Washington hotline[1]:

> During the [1962 Cuban Missile Crisis], official diplomatic messages typically took six hours to deliver; unofficial channels, such as via television network correspondents, had to be used too as they were quicker. The experience of the crisis convinced both sides of the need for better communications.

> During the crisis, the United States took nearly twelve hours to receive and decode Nikita Khrushchev's 3,000-word-initial settlement message – a dangerously long time. By the time Washington had drafted a reply, a tougher message from Moscow had been received...

[1]: https://en.wikipedia.org/wiki/Moscow%E2%80%93Washington_hotl...
Maybe because of this?

> mDNS implementations

> RFC 6762 was authored by Apple Inc. employees Stuart Cheshire and Marc Krochmal, and Apple's Bonjour zeroconf networking software implements mDNS. That service will automatically resolve the private IP addresses of link-local Macintosh computers running MacOS and mobile devices running iOS if .local is appended to their hostnames. In addition, Bonjour devices will use those .local hostnames when advertising services to DNS Service Discovery clients.

> Most Linux distributions also incorporate and are configured to use zeroconf.

> ..The connection of Macintosh and Linux computers or zeroconf peripherals to Windows networks can be problematic if those networks include name servers that use .local as a search domain for internal devices.

https://en.wikipedia.org/wiki/.local
For models with dropped weights, the keyword is "distilled". For example ssd-1b is a 50% size version of Stable Diffusion XL (https://huggingface.co/segmind/SSD-1B)
The fact that they aren't implementing the solution doesn't mean that the solution doesn't exist or isn't effective, though.

Plus, nowadays, most (all?) big frameworks have used KDFs by default for years.
Along the same line of questioning: Why are so much movie and TV show scripts so bad?

I keep asking myself, are these companies hiring 15yo children to write content for their Billion dollar projects? Because everyone is talking like they are teenagers.
I had to look it up myself but even the brands with less fillers still include lots of fillers and that’s the only way you can do it
Thanks for sharing. Is this a free way to access GPT4-turbo then or are there some limitations?
If Israel is guilty of a sin, they are guilty of moral appeasement. They need to stop giving sanction to their destroyers.
Most Java projects written for JDK 1.2 still run fine, unchanged and without recompilation, on JDK 22, provided that they don't make use of libraries that bypass the spec and reach for internals (or unless they're using discontinued technologies like Applets, although those would still be easy to port). Java's backward compatibility only applies to the spec, not to internal implementation details. Before internals were encapsulated in JDK 16, too many libraries reached for internals, and these non-portable libraries made their client applications non-portable without their knowledge. Those libraries reached for internals to add functionality and to improve performance, but in the process knowingly sacrificed portability but didn't make that tradeoff apparent to consumers.

Now that internals are encapsulated, upgrades are easier than they've ever been at any point in Java's history. Unfortunately, some large applications that depend on non-portable libraries — some of which were since abandoned — are stuck, but support for JDK 8 continues at lest until 2030.
Every time my wife uses teams on 2.4GHz wifi our home network goes down. Works fine on 5GHz. Of course there is already a thread about this from 2020: https://techcommunity.microsoft.com/t5/microsoft-teams/micro...
I think your system is probably secure.

But your system is relying on sha256 providing a guarantee that it wasn't designed to provide. It's better to only rely on dependencies in ways they actually were designed for.
Kalim: A Beautiful Blogging Experience
They are also transmitting codewords one or twice per week. A trivial part of the dead hand protocol would be to verify that the codewords progress according to schedule or the determined order.
I really enjoyed Jeff’s talk at GDC a few years ago.

https://youtu.be/stxVBJem3Rs?si=UdgguNK9X8NQ3Zty

It inspired me to go check out his games and now I have bought all of them on Steam.
Needs 2021 in title. Also Rest in peace Shamus Young :(
Did you try framacalc ?
https://framacalc.org/abc/en/
Ah, yeah okay but installing kernel updates not something I'd do myself anyway so that's the manufacturer's problem (and eventually my problem when I get pwned, sure). I thought you meant that it had some impact on the ability to run standard Linux software
The ideology of Islamic Fundamentlism is responsible for these terrorists. If Israel deserves any blame, its for listening to The West's constant demands for appeasement.
Not a memory development guy, but I am a rust programmer and have managed cybersecurity teams. Rust is amazing for memory safety and good programing practice. And cyber… is a lot more than the OS.
Complexity is trivial. That's the lesson here. It's human perception that's special. It's special in that it has an uncommonly low bar on what's considered impressively complex.

Which implies something important, no doubt.
Amazon is poised to boost its revenue by billions with the flip of a switch
I specifically use some .dev domains because of HSTS. Some of us don't cling to http and I prefer an error rather than transparent fallback to unsafe protocol if I screw up the config.

The first point is valid but that is mostly ICANN's fault, they should have proposed it as reserved instead of selling it.
I was just poking fun but everyone seems to have taken it so seriously.

I can’t imagine anyone working in such an environment. The MICE acronym is from counterintelligence and espionage.
"While this is not a conclusive finding, it is currently considered the likeliest explanation based on the evidence gathered in investigations conducted by the Associated Press, CNN, The Economist, The Guardian, and The Wall Street Journal.[7]"

No official investigations made (only statements made by pro-israel media eraly in conflict), no proof thefore. Yet israel has track of bombing the Gaza hospitals, which makes aposteriori a more plausible explanation for the incident.
Despite the name, HN has never been constrained to stories about IT, tech and startups.

It's the first sentence of the guidelines:

"On-Topic: Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity."
https://archive.is/goyXj
you mean X'd on X
The thing that can feel bad is nobody with disabilities needed it when you moved in - but how would you ever know if someone was looking once you’re renting?

Which is why for things like that we’re better off just building everything to better standards rather than designating some of them to be so.

But the ground-floor might be the key. Some apartments are not required to have elevators so the “upper units” are de-facto non-disabled units because they’re assumed wheelchair inaccessible. The trade off is to make all ground units fully accessible.

In older units and even single family rentals, some areas provide funding to update for disabled access. So you can have someone renting a house and a tenant wants to add ramps and an accessible bathtub. The government pays for (or contributes to) the remodel, the tenant gets guarantees about availability, the landlord gets a “free” upgrade that doesn’t hamper future rentals.
I use a subdomain of “int” for all internal hosts: host.int.example.com. My internal machines have int.example.com and example.com in the search path.
Have wars suddenly stopped because of the Internet? Not really.

More communication does not automatically mean more love, peace and happiness. Communication are the wires, words are the content and bring the meaning.
California signs cursive writing into law
It doesn't depend on anything.

Objectively, Hamas carried out a terrorist attack.

Objectively, Israel are conducting a genocide.

Anything else is hot air. Both deserve our criticism.
Yes. If I tell my phone to install a virus, I would hope the virus installs. That's my own personal responsibility. Responsibility is integral to freedom.
The PinePhone is probably the most stable one. I have seen a few people use it on this one and in a recent thread about the PinePhone it was also mentioned multiple times as a good alternative to the default Plasma.
Israel is not targeting civilians, thats a fact.
It gains nothing from hitting them, and trying it best to evacuate them to safe zones. Why would they try to hit civilians? and if they did, why they didnt try to fire into the safe zones? (whom Hamas have fired rockets into Israel from multiple times, yet Israel didnt attack in order to not hit civilians, while risking its own civilians)
The people making decisions right now are not far-right, the far-right have been moved to the side line when it comes to the war decision making.Instead Gants and Eizenkot joined, whom both are moderate right.
All the sentence you quoted are out of context and were said just after a few days that Israel suffered the biggest massacre, the entire country was in trauma and in emotions.