skysight-inc/HackerNews huggingface dataset:
Great write up.

> Over the next day, the threat actor viewed 120 code repositories (out of a total of 11,904 repositories

> They accessed 36 Jira tickets (out of a total of 2,059,357 tickets) and 202 wiki pages (out of a total of 14,099 pages).

Is it just me or 12K git repos and 2 million JIRA tickets sound like a crazy lot. 15K wiki pages is not that high though.

> Since the Smartsheet service account had administrative access to Atlassian Jira, the threat actor was able to install the Sliver Adversary Emulation Framework, which is a widely used tool and framework that red teams and attackers use to enable “C2” (command and control), connectivity gaining persistent and stealthy access to a computer on which it is installed. Sliver was installed using the ScriptRunner for Jira plugin.

> This allowed them continuous access to the Atlassian server, and they used this to attempt lateral movement. With this access the Threat Actor attempted to gain access to a non-production console server in our São Paulo, Brazil data center due to a non-enforced ACL.

Ouch. Full access to a server OS is always scary.
For these kinds of attacks it's nearly always China, Russia, US, or sometimes Iran. 95% chance it's either China or Russia, here.
Reading this 2 months after the fact feels a bit late, but I guess it’s better for your stock price if these revelations happen with remediation already in hand?

Since they didn’t really have reason to believe my data was accessed, maybe that’s ok. I know from firsthand experience how hard rotating all your credentials across the whole org is.
The cartoon makes children act a certain way, then the parents teach them that it's not OK to imitate what they see on TV.

If that kid was kept from watching TV for nearly 4 years, he never had a chance to learn that copying things from TV is wrong, so really it was both the TV at their friend's house and the previous lack of TV at his house that made him act that way.

For adults this shouldn't matter, because they are responsible for their own morality. If you showed a Hulk cartoon to an adult member of a previously uncontacted tribe, they probably won't hulk smash obnoxiously for three weeks.
Yes and no. There's an dual connection between ssms and convolutional models if certain constraints are met. Training convolutionally and inferring sequentially seeks a compromise between the two sides. I think we're about to find out the degree to which those constraints impact "easily".
Very few people have the resources and connections to be able to do that.
Also, as pointed out elsewhere, the number of hops is the biggest contributor to latency.
I would love to see some sort of reboot of the web with simple protocols and real experimentation happening in browsers again.

A lot of the web is still usable in text-based and simple HTML browsers. The problem is convincing brainwashed developers to NOT adopt the latest trendy features that invariably are only available in Big Browser (and sometimes Firefox.)
I'm not trying to parent your children for you. Why would you think that? I'm looking out for the welfare of my own.

Are you looking for a perfect solution?
Tesla also use BYD batteries for some variants: https://thedriven.io/2023/05/22/teslas-switch-to-byd-batteri...
[dupe]

what happened to that other one? https://news.ycombinator.com/item?id=39218463
How is that worse? Are you suggesting apple should be selling or charging for them?
Cornell University - Breeding Insight | Lead Software Engineer | Ithaca, NY | ONSITE or REMOTE | $125,583 - $153,491 | https://cornell.wd1.myworkdayjobs.com/CornellCareerPage/job/...

Breeding Insight (https://breedinginsight.org/) is hiring a lead software engineer who will work closely with our experienced product owner and science team, and direct a team of software engineers and QA analysts in building phenotypic and genotypic data management software used by USDA specialty crop breeders to increase the rate of genetic gain in field trials.

Our software stack:
- Java (Micronaut) API
- Vue (Typescript) frontend
- Postgres, Redis, also Gigwa for genotypic data storage
- CI/CD with GitHub actions and Jenkins
- Our infrastructure is on AWS

Breeding Insight is funded by the USDA through Cornell University. Our software is open source, check out our GitHub: https://github.com/Breeding-Insight/.
Cornell requires all applicants to use the myworkdayjobs link in the title.
I wonder if "gemini" will replace "okay google"? That's much less tedious to pronounce.
The rumors about Caesar's nose were greatly exaggerated.
This.

Why don't you just dispose of the battery yourself, and snap send you a new battery? And you keep the drone?
Writeups and actions like this from cloudflare are exactly why I trust them with my data and my business.

Yes, they aren’t perfect. They do some things that I disagree with.

But overall they prove themselves worthy of my trust, specifically because of the engineering mindset that the company shares, and how serious they take things like this.

Thank you for the blog post!
Why not? Cloudflare already operates a system that can help customers to require SSO for access to their services — why not try to capture more of that vertical by becoming an IdP?
I think this vastly underplays animals intelligence though. There is so much focus on creating human level intelligence, but where is a robot that can learn to navigate the world like a dog or cat can?
Ok. Replace engineering with just a business executive bound by NDA or security clearance into silence and my point still stands: no leetcode, no tests, no certifications, no gods, and people have long winded highly compensated careers and the sky doesn’t fall.
I noticed this passage:

> To speak in the plural of “forms of intelligence” can help to emphasize above all the unbridgeable gap between such systems, however amazing and powerful, and the human person: in the end, they are merely “fragmentary”, in the sense that they can only imitate or reproduce certain functions of human intelligence. The use of the plural likewise brings out the fact that these devices greatly differ among themselves and that they should always be regarded as “socio-technical systems”.

That's true now and will probably be true for a few years -- but it seems we could soon have systems that are fully general agents, not just narrow tools. Those would raise some thorny theological questions. For example, will the following be still true?

> The unique human capacity for moral judgment and ethical decision-making is more than a complex collection of algorithms, and that capacity cannot be reduced too programming a machine, which as “intelligent” as it may be, remains a machine.

And what about even more advanced AGI, systems that are more intelligent than any human?

> Human intelligence is an expression of the dignity with which we have been endowed by the Creator, who made us in his own image and likeness (cf. Gen 1:26)

... says Francis and cites Genesis, but that leaves open the status of superhuman machine intelligence. If intelligence makes us similar to the Creator, doesn't this mean that superintelligence is even more similar to Him than us? In a word, will it be a sort of angel? (Or, if it doesn't behave ethically, a devil?)

Probably that is too far away and to speculative for him to comment about. But I would like to know what his advisors have to say on these questions, if anything.
They were previously parallelizable (via fft), but performed poorly on language modeling tasks.

Mamba adds a dependence on the inputs that makes language modeling competitive with transformers, but that prevents using the fft approach. So they switch to a method using parallel prefix scan.
One that comes immediately to mind is that you might want + to handle vectors as well as scalars. Something like:

(define scalar-sum +)

(define (+ . arguments)
(if (vectors? 'arguments)
(vector-sum 'arguments)
(apply scalar-sum arguments)))

vectors? and vector-sum not shown for clarity.

Edit: or maybe you want any sum in excess of (say) $5,000 to alert a manager.

(define old-plus +)
(define (+ . args)
(let ((value (apply old-plus args)))
(if (> value 5000)
(begin
(alert-manager)
value)
value)))

The nice thing here is that this Just Works anywhere + appears in the code. You don't need to put the conditional and the call to alert-manager everywhere you're calculating a sum. Of course, in a real implementation you'd want to pass stuff to alert-manager like what module you're in, the transaction number, etc.
Scheme always felt less dynamic than Common Lisp to me, with less repl-messing capability.

Both Scheme and CL let's you completely shadow any symbol in a given compilation unit, however.
Do we have decent reason to believe this is no longer the case for US citizens and the NSA, post-Snowden?
They already run their own zero trust infrastructure for customers, kinda surprised they are not dogfooding it. https://www.cloudflare.com/plans/zero-trust-services/
Return to monkey
Internet says no:
https://www.cnbc.com/2021/11/19/german-space-lasers-company-...
When I use Bard to generate images, the style seems consistent. They all look like a low-effort painting, or those pre-computer-age advertising photos. Even when I use keywords like "photorealistic" or mention camera models in the prompt, the image still has that style. I don't hate the Bard look, but certainly other image generators are much more flexible in terms of style.

I find this to be a big misstep. Image generation is inherently more fantastical than text generation, and dialing up the creativity here is really essential, unlike text generation where it could be derided as hallucination.
The linked thread is marked "Flagged" and "Dead"
That was in 2010, apparently bulk lithium batteries were on board:

https://en.m.wikipedia.org/wiki/UPS_Airlines_Flight_6
Import Assertions being replaced, thats cool (its replacement perhaps should have made the list if the spec is done)

but OPFS is not widely supported. Its partially supported. Its not on the same interoperable standard as Chrome, for instance. hence for Interop 2024 it would have made sense to include, to close the gaps between the browsers.
> wifi has always been like that

not for me
Location: UK
Remote: Yes, exclusively for day to day
Willing to relocate: No
Technologies: Python/Terraform/SQL/AWS mainly, but not tied to anything
CV: https://cv.ojford.com
Email: cv.hn [username].com

In my current role I've drifted towards infrastructure - including performance, database queries, APIs, and have spent a lot of time trying to ensure statistical correctness (data analytics app) and on scaling data ingestion as we've grown.

Professionally I've mostly used Python and Terraform, but I joined a small full-stack team (JS/Vue too), and enjoy using TS/Svelte and Rust in some hobby projects, as well as Go for Terraform providers in particular. Happy working with any appropriate tool.

I enjoy the opportunity to learn about a new domain/industry, and understand that software doesn't operate in a silo. I like to take the time to understand a problem and build correct robust software, but I'm also well-acquainted with firefighting and can be scrappy when it's called for.

Recruiters: please don't contact me with non-specific opportunities. Thanks!
Jamsocket | Senior Rust Engineer | NYC, on-site

Jamsocket is a platform for deploying WebSocket applications at scale. Think of it as AWS Lambda, but for WebSockets. We start ephemeral processes on demand, and keep them alive for as long as there is a connection to them.

This type of architecture was pioneered by Figma. We want to make accessible to every product dev team. Our core infrastructure is open-sourced as https://plane.dev.

We’re hiring a senior systems engineer. Responsibilities will include contributing to Plane, helping to build out our ambitious managed platform roadmap, and participating in on-call rotation.

We are a seed-stage startup backed by Y Combinator and other investors.

More information:

https://jamsocket.com/blog/senior-rust-engineer
Location: Hamilton, New Zealand (NZ)
Remote: Yes
Willing to relocate: No
Technologies: Javascript/Typescript, React, Express, Postgres, MongoDB, Python
Résumé/CV: https://drive.google.com/file/d/1M3Ep8f_pmsabJA2dMyjphYsEnikMoVPd/view?usp=sharing
Email: jonathonshields@gmail.com

My most recent job was teaching/mentoring web development at a tertiary education provider. But now I'm looking to get more hands on again as I have missed coding. Nearly 10 years experience in the industry across a number of fields. I'm enthusiastic and always looking to learn. Let's grab a coffee!
Congratulations Eric and Ulrik!
Does everything need to be a celebration? Birthdays, weddings, baby showers, wedding-birthdays, stag do,... That's already plenty of opportunities for a narcissist to hear compliments from their friends in public.
Arc browser debuts Arc Explore for better bookmarks, search, and Live Folders
It wasn't Civil Rights Act that did what you are thinking of. It's Wickard v. Filburn. The landmark case which cemented the Federal Government's ability to intervene in acts of intrastate commerce on the assumption of impact on interstate commerce.

If you're actually concerned about a clear and present case of Federal overreach, focus on the actual source of the precedent in what is, as I understand it, the ultimate source of greatly exaggerated Federal reach.

The Civil Rights Act is generally far less controversial in terms of adherence to the Constitutionally defined implementation process.
Youtube, Facebook, Microsoft.
I predict every AI disinfo campaign this election will target Joe Biden and not Donald Trump
How so? It integrates well with the other Atlassian products they use.
Thanks for the shoutout! We are adding the Outlines integration to LoRAX in the next two weeks, so stay tuned!
I recall there being a clause in the iTunes EULA that prohibited it being used to develop weapons of mass destruction.
This finally worked for the 15th. It wasn't until the year 2000 that other races in Hawaii were granted equal voting rights in rice v cayetano. 130 years after the 15th was passed. Maybe in another 130 the 14th will apply to the state.

As for the CRA, there were previous ones defended under 14/15 and it was struck. The unique defense of the CRA is interstate commerce as expanded under wickard to somehow include basically all trade.
That's absolutely dystopian.
Mate, I think you’re being a bit pedantic, which doesn’t add anything to the conversation.
It's a pitiful amount.

I listened to 7000 tracks last year (I think that's well above average), so if that had been on YouTube it would have given $14 to the artists.

People used to spend more on music, even if they only bought a couple of CDs a year.
DuckDB is great! But row-oriented storage is also great for many use cases. My goal is to provide a way for people to have access to the benefits of column-oriented storage without leaving behind the benefits of OLTP. Many people are already using sqlite and might not have the time/energy/budget to make a full switch to a new database. I also think there should be many options for embedded columnar storage, and right now there really aren't.
Kottke turns a blog comments thread into a job board
GNC?
Today's Best Vector Databases
There's been some chatter recently about how many vector database options exist these days, whether we've reached the peak, etc. At Fixie we recently evaluated several of the options for our own service, so I thought I'd share our conclusions in an entertaining way. Enjoy!
Location: VA, USA

Remote: Sure

Willing to relocate: Yes

Technologies: Unity, Godot, Unreal. Game engines... I'm an indie game dev! Have been for more than 5 years. Surely there are more of us on this site :-) My special interests are graphics and gameplay, but I've also created custom networking, pathfinding, physics, and procedural animation.

Résumé/CV: https://github.com/GBudee/GBudee.github.io/blob/main/Resume_...

Name: Guillaume Bailey

Email: [firstname].n.[lastname]@gmail.com
The final security report was only released yesterday, and the amount of work they did to make sure all of their systems were secure after the incident was A Lot; two months is pretty quick for a project of that scale IMO.
Look at Australia. They have compulsory voting and a government that sells off natural resources to the highest bidder same as many others. Many Australians just get drunk on election day and write in “banana.” You can’t force people to care about something using the law that they don’t already care about.
The comment which I deleted contained something along the lines of "why does this work and why would a user have to concern themselves with this; a table flip seems feels vaguely like something that should happen as automatically as compiler optimisations".

This response does not really answer the question that is still just half baked in my brain, but since I did get a response (cheers!) restoring the record seems like the right thing to do.
For anyone who doesn't regularly follow The Onion, the verbiage in this post is directly copied from the story The Onion posts after every major mass-shooting in the United States.

An example: https://www.theonion.com/no-way-to-prevent-this-says-only-na...
Google Abolished Google Cache
Please no, because then the draconian 3 months notice period kicks in. Truly an artefact of a time past.

Take today’s date: if you quit February 1st, you can only start at a new place June 1st! At least 3, but up to 4 months of a continued work relationship is unattractive for both parties I’d say.

(At least that’s the widely used rule; the law only specifies a minimum notice period of 1 month)
Maybe but maybe not. I don't like Bitbucket but there are a number of large companies where they worry about using services owned by competitors in one of their verticals.
Ah! Thanks for correcting me. I only did a short amount of Google searching
I attended a living wake several years ago. At first, I thought the idea was odd and morbid, but I actually enjoyed it quite a lot. Just a bunch of friends and family gathered to swap stories one last time. Really fun and positive atmosphere. It made the funeral (a few weeks later) much easier.
Meta Quest v62 sw update supports Apple spatial videos, PS controllers, and more
One of my favourite stories is of George Lemaître who came up with the Big Bang theory, and predicted the Higgs Boson - while Steven Hawkins bet against it, and was proved wrong.

George Lemaître was a Catholic Priest.
* Location: Seattle, Washington
* Remote: Yes or Hybrid
* Willing to relocate: No
* Technologies: JavaScript/TypeScript, Swift, Python, React, Node, Express, PostgreSQL, MySQL, MongoDB
* Résumé/CV: https://halia-haynes-resume.tiiny.site/
* Email: haliahaynes@gmail.com
* LinkedIn: https://www.linkedin.com/in/haliahaynes/
* GitHub: https://github.com/hhaynes4

I am an enthusiastic Software Engineer, building apps across the stack, with a passion for crafting seamless user experiences through collaborative problem-solving. I am committed to fostering a positive team environment while bringing innovation and empathy to every project. Recently, I was building out Anago, a tool tailored for developers seeking to bridge the Kubernetes gap. Anago is dedicated to enhancing cluster performance and ensuring operation stability through custom monitoring and visualization features. (https://medium.com/@lash211/kubernetes-monitoring-with-anago...)
Location: Argentina
Remote: Yes
Willing to relocate: No
Technologies: Node.js, React.js/Remix/Next.js, Typescript, AWS, Postgres
Résumé/CV: https://julianpoma.com
Email: julianepoma (at) gmail (dot) com

Hello, I am Julian a full stack web developer with over 5 years of experience. My main stack is anything Javascript, but I am willing to learn other languages like Go or Rust.

I am used to working on async teams across different timezones. I am looking for a full stack or backend role, feel free to contact me and we can schedule a quick call :)
This is not the norm, as the employment modalities in that thread are super strange. If you’re employed by a German entity and your salary is 91.1k€, your take-home income would be around 53.8k€. Put another way - the $100k / 91.1k€ are the Arbeitgeberbrutto, they correspond to 75.5k€ Arbeitnehmerbrutto (the number you’d normally see on your contract). The difference exists because there are employer deductions and employee deductions, but the employer deductions don’t show up on the pay slip. Only in this constellation the employee has to pay both. It’s very much the exception, not the norm.
You could hit "vouch" button to restore that thread.
Still dreaming of the day they use AI to enhance the street view experience. Being able to walk through a photorealistic simulation of any place on earth would be amazing, but the UX and image quality doesn’t seem to have changed in years.
Did you read the article?

They are using zero trust and explained that it's why the scope of the security incident was extremely limited.
The « Launch HN » posts, like this one, follow quite standard community guidelines that includes having a detailed description of how the product works to bring value to technical people from the HN community.

Of course, for investors, we would have written things differently, but we are not looking to raise money at the moment.

Hope that makes it more clear!
We use our Zero Trust stuff extensively. In fact, we built it for ourselves initially.
Not sure why you're attacking me. I don't remember saying anything offensive.

Anyway, I've never been a fan of "moving fast and breaking."

Might want to give that blog entry I linked, a read.
If you live in a small/medium apartment then 6E is quite good. I've been using one of those "enterprise" tri-band APs for around a year and my experience has been also amazing, with just one AP in the entire flat.

Enabling all bands should allow your device to just drop to 5GHz/2.4GHz when needed. This has been seamless for me.
They have done a ton on the CSS side in particular, I agree with that, and its in a better place than it was 3 years ago, no doubt about that either.

My point still stands on interop though: They aren't picking anything where the interop is divergent and tricky for developers to navigate, and most of this was on their roadmap as going to implement soon anyway. They aren't tackling any thorny issues like OPFS, which is where developers want them to figure out interoperability for consistency because it moves the entire platform forward in big meaningful ways (for instance, makes PWAs more potent alternatives to native apps)

I applaud their CSS and HTML work though, that's been nice to see.
I think that is a joke about bombs.
>solved the finger-count problem

Has it? I'm still seeing tons of hand trauma, but I guess if it's fixed, I woud not notice.
Are you actually hiring? You've posted for these positions every single month for the past couple years, see:

https://news.ycombinator.com/item?id=27373603 https://news.ycombinator.com/item?id=34612652 https://news.ycombinator.com/threads?id=mmyller20 https://news.ycombinator.com/threads?id=mmyller20&next=34983...

Your senior engineering position was posted six months ago:

https://www.linkedin.com/jobs/view/3649931245

Yet your headcount growth is down 3% according to linkedin:

https://www.linkedin.com/company/koddi/

Only asking because I'm very interested but I'd hate to waste anyone's time.