skysight-inc/HackerNews huggingface dataset:
It's impossible to say without knowing what commands were available.

> This series of vulnerabilities demonstrated a way in which a fully external attacker with no prerequisites could've executed commands and modified the settings of millions of modems, accessed any business customer's PII, and gained essentially the same permissions of an ISP support team.

But the author agrees that this wasn't the vulnerability that allowed access to their own modem:

> After reporting the vulnerability to Cox, they investigated if the specific vector had ever been maliciously exploited in the past and found no history of abuse (the service I found the vulnerabilities in had gone live in 2023, while my device had been compromised in 2021). They had also informed me that they had no affiliation with the DigitalOcean IP address, meaning that the device had definitely been hacked, just not using the method disclosed in this blog post.
This shop is brilliant, thank you!
I have a cardboard set that I apparently got from https://www.tabcreations.com/ganjifa/ and it looks like they're still taking orders although I can't vouch for it. The card quality is reasonable, if a bit thin, and the design a bit boring compared to others I've seen.

The real cards are handpainted on wood, and often you can find antique sets on ebay at a reasonable price, but not for play.
Sure, but if I make a hole in the side of my house I don't need to replace the entire wall - I can patch it up. I'm sure the same is true here?
Indeed, people really fixate on “slow languages” but for all but the most demanding of applications, the right algorithm and data structures makes the lions share of the difference.
Location: Europe
Remote: Preferred (any timezone)
Willing to relocate: Yes
Technologies: Go, Python, JavaScript, C, C++, Bash, HTML/CSS, SQL, ES6+, PHP, GNU/Linux, PostgreSQL, MySQL, SQLite, Docker, Docker Compose, Git, CI/CD, Flask, FastAPI, Node.js, React, Next.js, Grafana, Prometheus, Kafka, Elasticsearch, Redis, KVM, Kubernetes, Nomad, Digital Ocean, Scaleway, AWS, GCP
Résumé/CV: Upon request
Email: hired at codecyanic dot com

Hi, I'm a backend-focused generalist software engineer with over 10 years of experience.
My expertise is in Go and Python backend development, as well as JavaScript frontend development.
I have a strong experience in technical leadership and driving projects from inception to completion.

Furthermore, I've founded multiple business, so I also have experience that comes from wearing many hats like Product Management, UI/UX Design, Customer Success and QA.

I'm looking for a remote opportunity, either full-time or part-time, but I'm also open to relocation (especially Southeast and East Asia).
The title itself is hilarious if you think about it.

But in an important note, I don't like that I never read of the warnings for psychedelics, like triggering schizophrenia.
First, the replication crisis, or at least its recognition, should if anything raise the standard for acceptable evidence.

More pertinently, I am talking here on a purely social and practical level. You seem to have taken it as a moral statement.
Excuse me I meant the related heavy-tailed distributions, which show up in dragon king theory.

I'm wondering if this result indicates we have a new method to eke out important signals from noise that otherwise get smoothed out.
Yeah though SSDs make that even easier, with the aptly named SECURE ERASE command. Modern SSDs encrypt the contents of the drive at rest _anyway_ (transparently, using a key that's baked into the hardware) as encryption algorithms are very good at removing repeated patterns that might degrade the flash over time.
One of the most important open problems in mathematics is called the Riemann hypothesis. It states that the solutions of a certain equation `zeta(z)=0` are all of a particular type. Almost every living mathematician has tried to solve it at some point in their lives. The implications of the hypothesis are deep for the theory of numbers, for instance for the distribution of prime numbers.

In a recent paper some mathematicians claim they have put some stronger bounds on where those solutions can be. In this link Terrence Tao, one of the most acclaimed mathematicians alive speaks very highly about the paper.

IMHO, this is probably not of huge interest to not mathematicians just yet. It is an extremely technical result. And pending further review it might very well be wrong or incomplete.

There are lots of places you can read about the Riemann Hypothesis, its implications and its attempts to solve it.
I maintain that "blame" is the right word. He doesn't establish any real casual connections of poor Chinese writing to European linguistic influence, so it seems to me that he is just pointing fingers at some convenient villain (European/English influence) instead of admitting that maybe people are just bad at writing.

Or it occurred at a time when literacy rates massively increased, and thus there was some vulgarization of the language to some extent.

I think he explains how to write better Chinese pretty well, I just don't think pointing fingers at other languages is helpful especially if it isn't grounded in fact or evidence.
Just open the gopro and remove the beeper. Then connect it to a big external battery.
An open question is still: how were the attackers able to grab his HTTP traffic?

Some CPEs have a cloud Wireshark-like capability for debugging. I'm not sure if those are even on the Cox production firmware images. Usually there's a set of firmware for production and a set for test (which obviously makes it hard to test for problems in production).

I suppose Cox could do a check to see what firmware versions are out there. ISPs can auto-upgrade firmware that doesn't match a specific firmware revision, and this was a Cox modem so they probably have firmware for it. So if it was a debug firmware how did it get there and survive?
For background, this video is a good overview of the Riemann Hypothesis: https://www.youtube.com/watch?v=d6c6uIyieoo
there is a lot of stupid bullshit in most orgs, and things only get fixed by often irritable, unreasonable people. "shut up and do it" was only an acceptable answer when I was in the military.

if the interviewee pushes back and find they don't like the answer, then it's a good signal to both parties.
Tesla stock is down not just YoY, but also basically since the Twitter acquisition. This guys attention is clearly elsewhere, but he expects investors to vote to grant him the biggest bonus ever, and for what? Yeah, he met the targets, but he demonstrably is not acting in the best interests of the company.
IIRC the attorney arguing against Chatterley seemed grossly out of touch by mentioning servants reading it and it didn't help his case. LCL was a bit of an attack on the impotence of the upper class and the lawyer was oblivious to the context of his remarks.
I'm not entirely sure about the backend, but for the frontend Intel has come up with a 'split decoder'. Essentially, Skymont will have 3x 3-wide decoders working in parallel on different parts of the instruction stream. I have no idea how they find points to perform load-balancing between these clusters (outside of taken branches), but the 2x3-wide setup in Gracemont seems to work like a charm after some improvements over Tremont which debuted the split decoder scheme.

> This scheme appeared with Tremont, where it could only switch decoders at taken branch boundarie and Gracemont improves load balancing between the two decode clusters by automatically switching, instead of relying on taken branches. That helps performance in very long unrolled loops, which could get stuck on one decode cluster on Tremont. When we tested with longer loop lengths, we didn’t see any drop off in Gracemont’s instruction throughput:

- https://chipsandcheese.com/2021/12/21/gracemont-revenge-of-t...
Oh, you are right, I missed that inversion. Although it's worth noting, the absolute employment rate for graduates doesn't seem particularly out of line historically speaking. It might be more accurate to say that the current low employment rate is affecting primarily existing workers in the market.

I don't think looking at the date of the crossover point is particularly helpful though, probably better to look at the derivative of the ratio between the two to see when the trend began. At a glance it looks like it might have began in 2009 during the recession, which actually matches up really well with when labor participation rates saw a big drop off. My off-the-cuff hypothesis would be that this effect could be explained by existing workers leaving the labor market, which wouldn't necessarily affect recent grads. I wasn't able to find a historical labor participation rate for recent grads though, which would help support that hypothesis.

For general labor participation rate information:
https://fred.stlouisfed.org/series/CIVPART
The affected generations of Apple TV were from 2010 and 2012 respectively, predating the current tvOS-based models by several years which are all still supported. Those generations weren't especially popular at the time anyway but it would be very unlikely that there is a significant number of these in use after 12 to 14 years given that Netflix were probably one of the last streaming platforms supporting them.
Where are you working that it’s white males?

80% of my colleagues are Chinese and Indian. This is usually the case at most of my jobs that aren’t early stage startups.
From an investor perspective, I'd rather hear: "we pay more for talent than our competition". That is the first step toward greatness.
massive cookie banner asking for your opt-in for data, on an ad about protecting your data.

not the worst look. also not the best.
local shop keeper "Orders" chocolate manufacturer to send the chocolate to his other shop

Chocolate manufacturer:

Who do you think you are? Lone Skum!
ICANN's TLD application status page [1] is quite interesting. Like Google trying to get .corp [2].

[1] https://gtldresult.icann.org/applicationstatus/viewstatus

[2] https://gtldresult.icann.org/applicationstatus/applicationde...
No, but realistically speaking, no one cares. If some big youtuber made a video about it it would likely be shut down.
Could you share the error you're getting locally?

Re: calling backend, yeah you can use requests or anything else (e.g
API client libs, talk to DB directly). The beauty is that you're just writing regular python code
Maynard is a Fields Medallist, so is also one of the strongest mathematicians around.
> Cox is the largest private broadband provider in the United States, the third-largest cable television provider, and the seventh largest telephone carrier in the country. They have millions of customers and are the most popular ISP in 10 states.

That suggested to me that we shouldn't have ISPs that are this big. Cox is clearly a juicy target and a single vulnerability compromises, as an example from the article, even FBI field offices.

> After reporting the vulnerability to Cox, they investigated if the specific vector had ever been maliciously exploited in the past and found no history of abuse

Feel like author should have written "...they claimed to have investigated...".
Side-note: I believe in many such cases (cancers and other serious diseases), the "placebo" is actually the existing standard treatment (not sugar pills), as it would be unethical to withhold treatment.
Norman Rockwell's Cast of Characters Revealed
Modem FW probably had a memory leak :)
Sounds criminal. It's against the law to use your position as CEO to enrich yourself to the detriment of shareholders.
Gemini down for me. I got text 500 responses, then an 'Unavailable' message [1], now a html 500 page [2]

[1] https://imgur.com/a/ouzg5wL

[2] https://imgur.com/a/DxCm2GU
Potentially readline? https://en.wikipedia.org/wiki/GNU_Readline
How to Be Data Illiterate (and How to Avoid Them)
Location: 100% REMOTE (on-site travel possible) | Central Europe, timezone independent but living in UTC+1 | Relocation only in most exceptional circumstances

Email: tinmarkoviccs (at) gmail.com

Tech/Resume/CV:

I'm a generalist and an opinionated software engineer with experience both in management and as an indepth technical designer, I am looking forward to work with you. If you need a larger team at your disposal, I can arrange that with my industry connections. I'm not looking for "cog in the machine coder" type positions :)

Leave me your contact if you'd utilize my help with:

- Large web API implementations

- Automatic code quality checks and processes

- Software Engineer management coaching or mentoring

- Process and scoping help (how to leave development hell)

- Large data streaming and processing systems

... and plenty other things, really. I am certain we can figure out a way to solve your issues in the way that _brings joy_.

I've got 8+ years of senior experience (leading and managing projects and teams). I've recently written code in Go, TS (& React), and Python (deployment and architecture included) with traditional stacks (Postgre, Redis, Kafka, etc. etc) and I'm comfortable with all the modern web tech-stack. I've got some past experience with C#, PHP, and all kinds of scripting languages. I pick up languages quite quickly, so that shouldn't be a problem, and I've got a working knowledge of most programming paradigms.

Reach out to me:

- via email at tinmarkoviccs (at) gmail.com

- via linkedin https://www.linkedin.com/in/tin-markovic

Feel free to browse my web to learn more about me at https://tinthe.dev/ :)
Here's a simpler explanation that fits the facts. Humans are practically genetically identical, are raised in roughly similar cultures with similar expectations of reality, and are being dosed with drugs generally assumed to be chemically similar (in this case) paired with the experiences that are reported. So while it's imperative to keep an open mind, it's also important to keep it closed enough that your brains don't leak out.
Amazing post, read through all blog posts in a single beat. I would be great to have a final blogpost on assembly process.

On a different note, it's mind-blowing that today one person today can do small scale design and manufacturing of a consumer electronics product. Super inspiring.
I like how Tao can just write a few quick candid thoughts and post them online for everyone.
> In an economy with borrowing, nothing.

As long as you're a net borrower, sure. For net savers, it's a bit less pleasant.
Remember Indiana Jones and the Last Crusade? They are not in the chamber yet but they did disarm one of the traps in the temple.
Ok, tell that to every doctor that I have been to (in Brazil and Germany) and basically said "don't worry about it unless you are immunocompromised".
I'd love it if a talented artist / meme-maker took the title and assembled the obvious joke :)
I love tangents!

I think all of your points are valid. I also think that we have optimized heavily for this state of technology. If we figured out that analog computing was somehow superior in a big way, I bet we would find ways of reducing power etc in analog designs.

One way that analog computing would be really neat for neural networks is in speed. The way it might not be so great is in reliability (or repeatability, specifically.) Analog systems are more susceptible to noise as well as variation from fabrication processes. Running things at saturation makes them easier to design, test and mass produce.
Are they not actually more convenient, or at least easier, especially from the couch? If I buy one of these appliances, I can buy it, plug it into power and the TV, sit on the couch with a remote, and watch TV. If I start with a PC, I can just watch stuff in a browser, but it needs a mouse+keyboard by default.
Or they lied.

I mean, if you think about it from Cox's point of view — why would you disclose to someone outside the company if there had been history of abuse? Why would you disclose anything at all in fact?
Being able to change the SSIDs for thousands or millions of customers remotely within a few hours would definitely be written about as an “outage” for Cox though.
A vintage aerospace navigation computer of uncertain purpose
Lunar Lake: Intel's utterly overhauled AI laptop chip that ditches memory sticks
Pre-silicon automatons are on my shortlist of things to buy/commission and play with if I ever somehow become a billionaire.

The writer automaton is something I've been utterly fascinated by for decades. It feels anachronistic; people without silicon chips and transistors shouldn't have automatic programmable robots! It required a level of genius that I'll never have but can really appreciate.

We take for granted how comparatively easy transistors made everything. I love seeing people's workarounds to try and reach the future.
Such claims of protection, reminds me of this Simpsons episode:

https://www.youtube.com/watch?v=xSVqLHghLpw

It's true that the COVID-19 initial variants were very dangerous, and that the vaccines worked against these variants.

However, the virus in 2024 is different from the one in 2019, but the side-effects, you are "guaranteed" to pay them.

You really have to think twice.
Maynard won a Fields medal, Tao is of course in the elite, but so is JM.
BioHome3D
1. Companies are amoral entities, and given the opportunity have few qualms about screwing people over if they can profit from it. Why do you expect people to behave ethically towards entities that most likely won't treat them ethically?

2. If said person doesn't present the bug to the company, but just goes straight to selling it to the highest bidder it's not extortion. If the company does not provide the right incentives (via e.g. bug bounties), isn't it their own fault if they get pwnd? They clearly don't value security.
Millions of us have been wishing for that our entire lives. We have about as much say in it as you do.
>>Say it with me, "Extraordinary claims require extraordinary proof."

Let's be honest with it. So someone is experiencing the self-transforming machine elves.
Please provide the exact description of neuronal circuitry (numbers of neurons, network architectures, interconnectivity patterns, amounts of neurotransmitters used, spike patterns and the resulting EEGs etc) which generates this exact experience. Ask a distinguished professor of neuroscience. Use integrated information theory, emergent properties, quantum collapse in microtubules, whatever currently established paradigm - and provide the exact, 100% comprehensive and full description of the brain state that presumably generates this exact experience, also allowing to differentiate from all other experiences like just "machine elves", "non-self-transforming machine elves" or elves with any other properties. Or just begin with the 100% comprehensive and full description of the brain state/circuitry generating the taste of vanilla, which would be distinctly differentiable from the state/circuitry generating a taste of chocolate or garlic.
Professional licenses and breaking up monopoly are totally unrelated regulations.
Instagram tests forcing users to watch adverts
> I am pointing at the social and professional stigma around saying anything less than positive about anything related to vaccines.

No, you're extrapolating those to wide scale second and third order impact that you have no data or logical baseline to support. Second and third order impacts related to vaccines that override many other higher priorities for short term decision making. You're claiming that a medical professional who doesn't speak out about vaccines will also look at someone having a medical condition, look up their vaccination records, look at if this condition may be related to vaccines, and then change the medical diagnosis they write to not put that condition on their medical record. Endangering the patient's very life through an incorrect medical record. A condition that actually happens more often in those without vaccines that get covid. A condition that happens significantly often on it's own with or without covid or vaccines being involved. Not just a few people but a majority of people to the point of drastically impacting the calculated prevalence of the disease.

I'm not even sure wha to call that mindset. I said conspiracy because the alternatives are even less flattering.

> Your response is sort of proof of this: I said something less than positive about vaccines and now you think I'm a conspiracy theorist.

No, I called you that because your argument is downright insane and I called you a conspiracy theorist because instead of reflecting on that your response is to call me as part of the conspiracy for merely calling you out.
>What is needed in the current SOC2 world that might solve some of the issues you outlined without getting rid of it, or the idea of it, entirely?

IMO, nothing. It's not redeemable at all. Since you asked though, here is some thoughts:

Be more like FDA process where software is extensively reviewed, rollback procedures established, and you launch specific version with compliance. So basically two releases, maybe 4 a year.

Disallowing risk mitigation because IMO, that's result of most of problems. Oh yea, we are doing "Terrible Security thing but since fixing is too expensive, here is a bunch of lies about how we have mitigated it."

There is also option to make a government audit with criminal liability for falsifying/misleading auditors. This third-party system where auditors are getting paid results in problems. I've seen plenty of audits where bosses write up auditor requests is extremely specific ways that creatively leave out thing that should never be approved. I've also seen auditors be made aware of problem, then people backtrack, and auditors accept it because "They are also our customer and we need repeat business."
I wonder if OP works in healthcare, after HIPAA passed encryption at rest was the buzz word of the decade as it was one of the primary requirement of HIPAA.

The problem of course being, most health care breaches are on applications that aren't at rest so all the data was being stolen anyway.

From 2012-2021 I worked in health tech and on many calls with large customers and security questionnaires were on whether we were actually storing their data encrypted at rest. We even had to get audited for Aetna to validate encryption at rest (amongst other things). To me this seemed like such a joke of a requirement because all our data was in AWS, and breaches were far more likely from other avenues.

So to me this reads as a jaded SWE or CISSP who has dealt with how much attention this one attack vector is paid, but ultimately it is kind of a given now in modern cloud infra.
Angular resolution through the Atmosphere has been solved with adaptive optics and advanced mathematical techniques.

Unfortunately, nothing can remove the temperature of the atmosphere (which affects infrared imaging), or the absorption of many wavelength bands.
Ah, I see. Thank you for explaining. This is much clearer.
Climeworks AG specializes in direct air capture (of CO2)
also, yet another reason I don't trust (and don't use) any ISP provided equipment. Remote administration from my ISP? No thank you.
Always put your own router in-between.

If you really care you can configure a VPN directly on the router, so nothing leaves the network unencrypted.
In the linked article (https://www.amusingplanet.com/2019/06/the-galloping-horse-pr...) there are some examples of "wrong" galloping horses. The first two examples look like the "rotary gallop", which is how a dog or a cat, not a horse, would run. The third example is plainly wrong, because the horses are mid-air but seemly ready to land in one leg.
I was excited to read Pale Fire after reading what I consider to be one of the finest novels ever written, Lolita. The protagonist is a monster, but the writing is so eloquent - and not even in the author's original tongue! Pale Fire was simply boring to me. I am not extremely literary, so a lot of it probably went over my head, but I was rather disappointed it didn't shine like his 1955 masterpiece.