skysight-inc/HackerNews huggingface dataset:
You can definitely prevent a lot of file/executable accesses via SELinux by running sshd in the default sshd_t or even customizing your own sshd domain and preventing sshd from being able to run binaries in its own domain without a transition. What you cannot prevent though is certain things that sshd _requires_ to function like certain capabilities and networking access.

by default sshd has access to all files in /home/$user/.ssh/, but that could be prevented by giving private keys a new unique file context, etc.

SELinux would not prevent all attacks, but it can mitigate quite a few as part of a larger security posture
Well it worked so perfectly in Chicago :/
I imagine that for any small-to-medium sized avian a ~100lb robot could very easily become a threat.
Has anyone proposed a name for this exploit yet?
You don't know what you've lost until it's something you want to re-live or remember.

I go back through photos and videos of my kids and it reminds me that I succeeded at something worthwhile and difficult for at least a period of my life. They had a blessed childhood.

Food or selfies and even holiday snaps mean little. But the kids... that's the raison d'être.

Overall it's these photos and videos that are my strongest motivation for the paranoia-level backup setup I have.
The US is behind more documented backdoors than those other countries.
Delirium Tremens
Replaced by what? Current tools are not built up to the purpose, they are mostly toys built by ML folks, not tools to get things done. There's a lot of talk but no walk. The only wildly successful application I know of is segmentation and automatic keying, which is actual magic and saves a lot of tedious work.

Once they stop ignoring the domain knowledge, the entry barrier and complexity will only go up, as it happened to 3D CGI back then.
> since day one

But if you forgot to do it on day one, you can't do it on day two because there is no way of getting them out other than rooting the phone.

Giving how your premise was wrong, I won't bother to read that novel you wrote. I'll just assume it's all derived from the wrong premise.
Are the downvotes expression of disapproval with the FDA process or disagreement with the assertion that it's become slow and expensive enough to pose an ethical problem (e.g. for people with diseases for which a cure exists but is still waiting for approval)?

Or does anybody actually believe FDA approval is very easy and cheap to come by these days?
Okay? Then if the US starts changing its policy they won’t make stupid deals with the rest of the world then.
Notes on El Salvador
How can a song which is liked by tens of millions of people be "bad".
And they’re actively lobbying to keep it that way.
Songs are a lot more than their lyrics and there are a great many wonderful and popular songs that have _no lyrics at all_. Lyrical complexity isn't really a good measure of the overall complexity of a song.

Anyway, a lot of this because of the rise of dance music which is often more about rhythm and timbre, and vocals if they exist at all are often background and used more as texture than as the driving force behind the song.
I assume you're talking from a USC perspective? Can you say which specific law, chapter, and clause applies?
This is nice but Tesseract does not perform well when it comes to tables, at least when I tried it on multiple documents.

It would miss some cells from a table, or does not recognise all the numbers when they have commas.
Ah, thank you for the correction!
> If the payload didn't have a random .5 second hang during SSH login, it would probably not have been found for a long time.

Ironic, how an evil actor failed for a lack of premature optimization :D
CTO/VP Engineering have the same separation of tasks as CEO/COO.

The CTO is the chief engineer he or she sets technical direction for the company. VP of Engineering is the top manager for that division and executes the CEO’s vision using technical choices made by the CTO.

In many companies these are the same person, but not always. In my last startup they were separate people. The best chief engineer (CTO) isn’t always a good people person (VP).

Software companies that differentiate by some metric other than core technology might not need a CTO, which would explain your confusion if that’s your background.
Is there a Mac version or do you run it on Mac under Wine/Crossover?
This falls into a greater pattern of behavior in the us that I have noticed where pricing for almost everything is completely opaque. The price on the menu for a burger is not what comes out on the bill (tax, gratuity).

The price for healthcare is beyond understanding for mortals. The price for drugs, again you and your neighbour could be paying something completely different for the same medication. The actual cost to your wallet for university? Who know, everyone seems to get different levels of subsidy and scholarship. Visa Cash App - you can make the same purchase on two different days and pay different prices, unique only to you.

I find it incredibly exhausting to visit the US and navigate all these pricing systems, I dont know how you have let this become a psychological status quo.
Indeed, they are not selling the drugs at a price that is below their marginal costs. But they are also not selling drugs at a price that compensates them for the development cost, including the cost of drugs that didn't reach the market. They are free riding on this latter part.
But Chinese (or mandarin) is not a context-free grammar whereas I believe that encoding a language on a turing machine implies a context-free grammar so this example doesn't hold.
I've never used NetBSD, but this announcement is rekindling my desire to install it on my old PowerBook G4.
Yes, at least in the UK. From working through some US university curricula - it's also present there as well.
Just to be clear, this was one of the arguments of the Helix maintainers. I (sort of) agree and do think it's the _overall_ better approach in terms of general learnability and ease-of-use (bar WASM+WASI components, though that has it's own complexities).

However, my complaint was a bit more selfish-- for me personally, I'm a bit let down because I had gotten the idea in my head that I'd be able to use Rust from top to bottom. Following the discussion for the plugin system for a good while, many different options were on the table and I had gotten my hopes up for the ones which didn't pan out. Woe is me, but I'll live and I trust the maintainers to do what is ultimately right for the editor.
Yeah, perhaps something akin to an OSS variant of virustotal's multi-vendor analysis. I'm still not sure it would catch this, but as you say, raising the bar isn't something we tend to regret.
I meant a second sheet between you and a duvet. Ofc there is another one covering the matress.
Surely they can automate the renewal? It seems their solution is a manual one. Am I being a simpleton?
OK, well in that case I agree w/ you, htmx handles trivial stuff pretty well:

https://htmx.org/essays/a-real-world-react-to-htmx-port/

Comparisons w/KnockoutJS (and old angular) are pretty superficial: Knockout is a reactive framework whereas htmx is hypermedia-oriented, they scale differently. htmx tends to scale well when UIs are well factored on the server side:

https://htmx.org/essays/when-to-use-hypermedia/
I appreciate the transparency on the issue, like how proposed solutions discussed publicly in an instructive way, e.g.:

> Other options that had been proposed early on included sanitizing the input. But this approach was described as "extremely tricky to get right (after all, vega failing at it is how we landed in this situation)."

Also interesting to see how implementation details bubble up to strategic considerations; e.g. how the decision to use iframes or not is linked to impact on mission.
Thats called git bisect
In 2007 Ikea stopped selling duvet covers with holes in the corners. “It’s for the international market” they said.

There was a national uproar. People no longer knew how to make their beds.

Attempts were made at convincing them to bring the holes back but without success. We have now settled for the typical Swedish response of making an angry fist with the hand securely hidden inside a pants pocket.
Yeah, I'm probably thinking of the perceived motives of some outspoken capitalists (Note that I would call myself a hippy capitalist). And amoral is probably a better word than immoral. I only have near experience with one hedge fund manager - not so common in New Zealand. So my own biases are coloured by the mediums I learn from.
How soon until AI replaces simple Autotune Kanye? With deep Autotune Kanye.
Decrease in cultural homogeneity and increase in diversity. Have to keep simplifying to appeal to a broader and broader audience.
Pfizer net income for 2023 by quarter. After taking in 10s of billions in vaccine profits this certainly looks like some fun accounting.

2023-12-31 $-3,369
2023-09-30 $-2,382
2023-06-30 $2,327
2023-03-31 $5,543

https://www.macrotrends.net/stocks/charts/PFE/pfizer/net-inc...
FYI, cert is expired.
> This individual/organization needs to be on the top of every country's most wanted lists

Because if the "organization" is a U.S. agency, not much is going to happen here. Russia or China or North Korea might make some strongly worded statements, but nothing is going to happen.

It's also very possible that security researchers won't be able to find out, and government agencies will finger-point as a means of misdirection.

For example, a statement comes out in a month that this was North Korea. Was it really? Or are they just a convenient scapegoat so the NSA doesn't have to play defense on its lack of accountability again?
You said no one watches it. I pointed out that's categorically not true. It has hundreds of millions of people watching it. That's not no one. That's a lot of people. More people watched formula e than watched the super bowl. More people watched Formula E than watched the Le Mans 24 hour (nearly 3x). More people watched Formula E than watch Supermoto last season. etc. etc.

Your whole point was grounded in the idea that it's a sport no one watches, and that's just fundamentally not true. It's not only got a solid viewership base, it's growing at a phenomenal pace, with 2023 seeing a more than 50% growth over the 2022 season.
That's a 10 year old article. Although if we rank by market cap top 6 are from the US these days (by revenue 5 out 10 seem to be European) so not much has seemingly changed (besides Novo Nordisk becoming the second most valuable pharma company out of nowhere)
Never heard of this, but just downloaded it. After trying Vintage Story, this feels incredibly polished! Ability to zoom out from character perspective to entire world without a hitch kind of blows my mind. And written in Rust! I may be a new fan.
Researchers compiled lyrics to songs from five musical genres (rap, country, pop, R&B, and rock) that were released between 1970 and 2020.

This is an interesting period to sample. The late 60s and early 70s were a high watermark for pop and rock music. Pop music evolved considerably from the 40s (Crooners and jazz-dominant hits), through the 50s and early 60s ("the American Songbook"), to the emergence of psychedelic rock and the cerebral singer-songwriter in the 60s. The increased prominence of genres light rock in the 70s and hair metal in the 80s would drag complexity down.

I think if they took the period 1920-2020, the trend would not be prominent.
>> So why is older insulin more expensive in the US than elsewhere, by a large margin?

Here you go kid: https://en.wikipedia.org/wiki/Free-rider_problem

Read that, and then you can explain to me the answer to your question.
Using the gyroscope for shutting it down when moved/touched plus disk crypto would make a nice little secure server.
This is actually really good information, thanks for pointing it out!
Definitely. Occasional verbal references were fine, I appreciated more the subtle little visual references in LCARs interfaces etc more that in dialogue.
They state that the goal is to reduce crime on the freeway. Let's move the problem but monitor everybody.
It may be, but by whose or what standard?

We are now in an age where expected norms in society are such that the slightest criticism of anyone—even if justified—is taken as offensive by both the recipient and by onlookers.

Unfortunately, keeping mum and not saying anything just lets people off the hook, they no longer have to justify their actions either to themselves or anyone else. In fact, I'd argue that in recent years the trend has gotten so bad and out of hand that it's having a very noticeable negative impact on society.

Clearly, I'm older than you, when I was younger this comment would have hardly raised an eyebrow (right, I'm old enough to have noticed this societal change and the negative impact it's had).

When I was at school we were actively taught to ignore unwarranted critism, and even if it were justified to consider carefully what was actually said before responding. In fact, the old adage that 'sticks and stones may break my bones but words will never hurt me' was drummed into us kids at a very early age (in infants school). Can you imagin teachers teaching that today? I'd reckon they'd likely be lynched.

Now, what's the situation nowadays when kids are no longer taught how to develop and strengthen their resilience? Well, one only has to look at the fallout on social media. Now we have kids taking such great offense at something someone has said to them and they're getting upset to such an extent that some even resort to suicide. (When I was a kid suicide was something that only adults with disturbed minds did—never kids or teenagers, it was unheard of. No doubt there were isolated instances but we kids never heard of them.)
In Australia a duvet is called a “doona” and while there are some perverts who use a sheet between person and doona (these are people who don’t like to wash doona covers), fitted-sheet=>sleeper=>doona is the standard
I don't think "admire" is the right word, but it's a pretty impressive operation.
Why couldn't they have had 50 or 100 targets in mind, and hoped that the exploit would last for at least the month (or whatever) they needed to accomplish their multiple, unrelated goals?

I think your imagination is telling you a story that is prematurely limiting the range of real possibilities.
Does it matter that only some of them are headquartered in the US? Presumably those other companies also sell drugs in the US?

I would think any company - regardless of where it’s headquartered - would seek to recoup R&D costs in a huge market like the US where prices aren’t capped by the government.
2 popular and well tested rust yaml libraries have recently been marked as unmaintained and people are moving away from them to brand new projects in a rush because warnings went out about it.
I thought that OpenSSH's sshd already separates itself into a privileged process and a low-privilege process. I don't know any details about that. Here's what Google showed me for that: https://github.com/openssh/openssh-portable/blob/master/READ...
Tables are still the big unsolved problem for me.

There are a ton of potential tools out there like Tabula and AWS Textract table mode but none of them have felt like the perfect solution.

I've been trying Gemini Pro 1.5 and Claude 3 Opus and they looked like they worked... but in both cases I spotted them getting confused and copying in numbers form the wrong rows.

I think the best I've tried is the camera import mode in iOS Excel! Just wish there was an API for calling that one programmatically.
Didn't know Git had a bisect feature. I'll keep that in mind for later.

Other than bisect though, I do think a lot of the practices outlined in the article (checking the blame, logs, search, etc) is way easier to do in a web UI, at least for someone like me who hasn't tailored their workflow for the command line. The tooling is so ubiquitous that it's easily available. I personally think GitHub does okay in those regards.
Glad someone finally quantified what everyone is obviously noticing.

At this juncture, since the entertainment industry can't take risks anymore for new ideas, it's high tine that AI simply displace it entirely.
Is england turning into a third world country similar to a far right African state. This sounds like some Mafia stuff.
Can we blame the welfare queens from starting to drum up support for more taxpayer funded bailouts in anticipation of a recession?
It was checking if the C compiled to detect the landlock feature, and there was a single character in the middle of the code that made it always fail to compile and therefore silently leave the feature disabled.
Imagine a future where state actors have hundreds of AI agents fixing bugs, gaining reputation while they slowly introduce backdoors. I really hope open source models succeed.
Disillusioned Businesses Discovering That AI Kind of Sucks
SELinux does not rely on the usual UID/GID to determine what a process can do. System services, even when running as "root", are running as confined users in SELinux. Confined root cannot do anything which SELinux policy does not allow it to do. This means you can let sshd create new sessions for non-root users while still blocking it from doing the other things which unconfined root would be able to do. This is still a lot of power but it's not the godlike access which a person logged in as (unconfined) root has.
My first computer had 3583 bytes of RAM...
Dragon Gate. There’s my contribution.
Yep, also GraphQL and all those data lakes.

That reminds me "XML is the future": https://www.bitecode.dev/p/hype-cycles
In the big cities at least, $20 is already the floor on most fast food jobs. This will have the most impact in poorer cities and more rural towns.

It should spur more productivity via automation (like more kiosks and robots being used in fast food).
Not mentioned in this article is one thing that goes very well with GC is async/await

I am a async/await hater for personal Idiosyncratic style reasons that I will not bore you with

I use it a lot in Type/Java script. Have done so in Dart. Works as it should

I have used it in Rust. IMO it is a disaster there. Shoehorning the sort of memory management required to use asyc/await with a multi threaded runtime is a hellscape

https://doc.rust-lang.org/std/pin/index.html
Mathematician who made sense of the universe's randomness wins Abel Prize
To say nothing of enterprise EDR/XDR solutions that have linux versions. These things aren’t bulletproof but can be 1 layer in your multilayer security posture.
Vaccine investment is a no-brainer – so why aren't we doing it?
How EV demand could revive California's Salton Sea wasteland [video]
... wouldn't that be k1s?
I strongly success people listen to the Aquired episode on Novo Nordisk. It's quite interesting and we'll researched.

https://www.acquired.fm/episodes/novo-nordisk-ozempic

If you don't want to listen, there is the transcript right there on the page.

In there, they mentioned "It's pretty interesting. Pharma as a whole of the medical pie only occupies about 13% of revenue."

”The administrative costs of health insurance are 8%."

"I will say, who is taking any risk in this whole ecosystem? It's only pharma. Who's taking risk to innovate and make anything better? Every other bet that a hospital makes or that an insurance company is just probably going to pay off."

Say what you will, but pharma is pushing healthcare forward so I am not against them making money. Of course, I also don't want people to have lack of healthcare access because merely money, so there is a line to tow here.

The way insurance and drug pricing works in the US is bonkers and I would not solely blame pharma for that.
Really sounds more like Mafia interdiction of good stamps and replacement
I agree with the need for more hardware that runs free software with no black boxes.

But I disagree with the single device for everything mantra. A phone and a computer have vastly different usage contexts. And until we invent some sort of magic 100% efficient electronics, if that's even possible, heat management of both will need to be different. On a similar vein, until we invent some sort of magic battery with orders of magnitude more energy storage density, energy management and consumption for both phone and computer will need to be different.

Until we make those physics-defying break thoughts, merging both use cases into a single device will either mean a constantly overheating, minutes-long autonomy phone, or an underperforming, underwhelming computer.
I personally just used the covers alone, but I also found out that finally there is some with buttons or even with zipper. And pillow covers with zippers are amazing.
For (2) Virgil has several features that allow you to layout memory with various levels of control. I assume you meaning "array of structs", and you can do that with arrays of tuples, which will naturally be flattened and normalized based on the target (i.e. will be array-of-structs on native targets). You can define byte-exact layouts[1] (mostly for interfacing with other software and parsing binary formats), unbox ADTs, and soon you can even control the exact encoding of ADTs.

Virgil is GC'd.

[1] https://github.com/titzer/virgil/blob/master/doc/tutorial/La...
What's important is it doesn't prevent counterfeit to consumers, which is failed planning.
Dysfunction in the IT of civil engineering (and similar) professions is fairly common. I remember this exact phenomenon too - of Irfanview's default UI controls not suiting what the staff were used to. And the staff didn't need The Most Powerful Tool Under The Sun, they just wanted to view and zoom and browse, and a few other tools, using the keypresses and mouse movements they were used to from previous software.

And Irfanview could do those things in it's sleep with both hands tied, with a few simple config changes. But the dysfunction - often rooted in the minimal, grudging acknowledgement given to IT by (non-IT) old professions - led to a lot of half-assed setups where staff butted their heads against obstacles that were often a mere few clicks away from improvement, if only they'd known to put their attention there. But of course, they were too busy being civil engineers.

And if I may shoehorn another point in here : it's not as though AutoCAD and other such industry software comes with ready default settings. If you used those straight out of the box with no customisation for your own situation, you'd be in deep trouble.
Why use a $20 Arduino when you could have just gotten a $1 custom PCB, $0.50 microcontroller, and a handful of jellybean parts to do the same job? Because one costs less in Non-Recurring Engineering (NRE) than the other, you'd have to design the schematic and layout and then select parts that are affordable and available. Sometimes its just makes more sense to use a reusable component than doing something custom, especially when you don't plan to sell a lot of them. Someone needed a 1-to-4 decoder and for some reason, couldn't find one on the market that fit the application. The Gate Array already existed and was cheap to configure so that's what they went with. It's overkill but so is getting a brand new die made for such a throwaway part of the design.
Boat Race: Oxford rowers criticise sewage levels in River Thames
libselinux also links to liblzma (and gets into sshd via PAM)

https://news.ycombinator.com/item?id=39867126