skysight-inc/HackerNews huggingface dataset:
It's in the article's headline.

And at the risk of annoying everyone, a GPT summary:

This article investigates how Microsoft, in pursuit of profit and market dominance, overlooked significant security vulnerabilities that left the U.S. government and other entities exposed to cyberattacks by Russian hackers. The whistleblower, Andrew Harris, a former Microsoft cybersecurity specialist, discovered a serious flaw in a Microsoft application used for cloud-based program access. Despite Harris's persistent warnings over several years, Microsoft delayed addressing the flaw, prioritizing business interests, particularly securing a lucrative deal with the federal government for cloud computing services.

The security loophole was within Active Directory Federation Services (AD FS), which if exploited, would allow attackers to impersonate legitimate users and access sensitive data without detection. Microsoft's decision to deprioritize this issue, despite internal and external warnings, eventually led to the significant SolarWinds cyberattack, affecting numerous federal agencies and demonstrating the consequences of the security oversight.

Microsoft's response to these accusations has been to emphasize its commitment to security, stating that they take all security issues seriously and review them thoroughly. However, ProPublica’s investigation reveals a culture within Microsoft that sometimes places business growth and competitiveness over immediate security concerns, reflecting broader issues within the tech industry related to balancing profit-making with customer security.

The article sheds light on internal conflicts, the company's handling of security vulnerabilities, and the broader implications of such practices for national security and customer trust. It also highlights the challenges faced by whistleblowers and cybersecurity professionals in advocating for swift action on security issues within large corporations driven by profit motives and competitive pressures.
How do you get these links, do you have a step by step by any chance? I feel like I've tried to get them on my own and they never seen to work or be a short link like this. Thanks in advance!
I'd say the best part is not needing screen on the server.
If you have several servers and several people that like several multiplexers, you would need to install all of them in each server, and manage configuration etc.

However, you can have your own multiplexer and use shpool on a window to connect to a server.
Done, you have your favorite multiplexer, with your configuration, and the only tool in the server is shpool
I knew some meat cuts were iridescent, never knew why.

I only have one question:

“A commercial pork (Sus scrofa domesticus) loin sample was supplied by the commercial processing facility (Morliny Sopocka, Animex, Warsaw, Poland).”

Does this mean they asked the facility for a meat sample directly, or is it the science-speak for “we bought the meat at the nearest grocery store”? The photos suggest the latter, but if so, why not just write it so?
Internet connectivity tends to have a throughput vs latency curve.

If you need reliable low latency, as you want for a phone call, you get very little throughput.

Examples of such connections are wifi near the end of the range, or LTE connections with only one signal bar.

In those cases, a speedtest might say you have multiple megabits available, but you probably only have kilobits of bandwidth if you want reliable low latency.
Jetify Cloud: Package Caching and Deployments for Devbox/Nix
That's great! Which creator was it? Simon Willison is very active here, I don't know if Adrian Holovaty ever was.
In a typical rocket the payload is the most expensive thing, followed by the engines, and then the rest of the rocket and the fuel. Shaving costs off the engines is well worth it, but not if it sacrifices reliability.

Maybe they have a model in mind where it works. If you use dozens of engines like SpaceX's Starship you can tolerate more engine issues. Of maybe they want to launch really cheap payloads on inexpensive rockets. But in the parameters of traditional rocket design, QA on your engines is one of the last things you want to save money on.
> firing someone based on this sort of monitoring or information should be illegal.

What would be a justifiable (won't get me in jail) firing in your mind?
Proofread: Fixes All Errors with One Tap
There’s a section (“Our motivation for building a new codec”) in the article that directly addresses this. Assuming you have >32 kbps bandwidth available is a bad assumption.
> People said the same thing about calculators back in the day. They were wrong then and they're wrong now.

This is the most copy-pasted sentence on the internet. Do you have any sensible argument?
Are there really many situations where a 10kbps connection would actually be stable enough to be usable? Usually when you get these kinds of speeds it means the underlying connection is well and truly compromised, and any kind of real-time audio would fail anyway because you're drowning in a sea of packet loss and retransmissions.

Even in cases where you do get a stable 10kbps connection from upstream, how are you going to manage getting any usable traffic through it when everything nowadays wastes bandwidth and competes with you (just look at any iOS device's background network activity - and that's before running any apps which usually embed dozens of malicious SDKs all competing for bandwidth)?
The problem with this ruling is it's out of the Supreme court's jurisdiction. The supreme court/federal courts do not have jurisdiction over all legal cases, and they can be stripped of the ability to hear cases. That's what happened with the creation of the NLRB.

Article 3 section II

> In all the other cases before mentioned, the Supreme Court shall have appellate jurisdiction, both as to law and fact, with such exceptions, and under such regulations as the Congress shall make.

Congress made an exception with the creation of the NLRB which means the supreme court should not have heard this case.
What if we had Web Intents for LLMs, similar to App Intents for Siri?
We think here's how it may work from a triple-win perspective:

1. Users care about the outcome and enriched user experiences without needing to learn how to use the app first. So, cut to the chase.

2. Third-party app providers want their data protected and not leaked to LLM providers. Most importantly, it provides a way to convert traffic to their own sites, similar to what they expect from a search engine, rather than being replaced by a feature of an LLM-based app.

3. LLM-based platforms require little effort to support this and can monetize by replicating traditional methods of recommending and advertising apps.
I've definitely been turned off of ham on occasion due to this property. I had no real conscious reason since I generally enjoy ham but the effect has made it less appetizing to me. I wonder how much of that was due to primarily associating the visual effect with gasoline.
Since Starship itself is made of steel, it seems possible that the satellites could be as well.

Assuming it's overall heavier, you have to carry more fuel, and then the rocket equation kicks in and you have to carry more fuel than that. That's all extra weight that makes your launch more expensive. But if your cost to launch is $30/lb instead of $1200/lb, you've got the budget for it.
its a fine argument made well, but no.. the job description and the work as directed are the agreement between the employee and the company. IANAL it seems that the fundamentals here are abusive or unwinnable terms of employment, fundemental labor rights that may not be overridden, and yes, slacker or cheating employees who may be gaming their supervision and what to do about that.

History is full of outrageous "agreements" by the powerful applied to the powerless, so there have to be labor laws that set an even playing field. Distributed work across legal jurisdictions is an opportunity to push those labor agreements and avoid consequences. On the other hand, there have always been cheaters among workers and that wont go away, either.

Modern technology has opened a pandora's box of constant surveillance that was not practical or even possible previously. There have to be new agreements on labor practices. It is a political problem. Compounding the urgency of this situation in an advanced economy is the looming implementation of AI to replace workers, and to enable a few workers to do the work of many, many more of the past. This time around, middle-managers are included in those that are replaceable, or perhaps even mid-level leadership i.e. "your boss is an AI"
> Price tells a story. If AMD performance would be in par with Nvidia they would not sell their cards for 1/4 price

What were your thoughts on Zen (1) vs Intel's offerings then? AMD offered more back for the buck then too.
What's the word for something that people reshare a bunch without reading it because they are frustrated at the world and want to put it into other people's faces?

Not a left-right thing, I think we all have our poison. But also something that seems more like a rallying cry for the most frustrated rather than an unmotivated invitation to the undecided.
Preparing for a world where Alzheimer's disease is treatable
I'm genuinely shocked.

Not because I think it's the wrong decision. I thought it was incredibly obvious. So obvious that nobody could possibly have passed such a law unless they expected a partisan court to concoct a reason to back it.

At best I expected a 5-4 decision in favor of the right choice. Having all 9 justices make a decision that runs contrary to the ideology of a majority of them should make me question my belief that they will always choose ideology first and find a justification afterwards.

And yet... "lack of standing" is frequently used when they know they'll look bad, so they pretend the question doesn't actually exist.
I produce my best work at my best productivity when I'm having fun, so those that pay my salary should appreciate that. This is a case where my values and the values of the beancounters are aligned.

If I'm not having fun, then I'm in the wrong position and need to move on. Life is too short to have my day job be a grind, and I won't produce great work in that condition.
Employees who attempt to organize are not doing so to help a supplier or favored customer. They're doing it to improve their relationship with their employer. When you deal with management at a large corporation, you are rarely ever dealing on a 1:1 basis with someone. You are dealing with a group of people. So why should employees not have the same opportunity?
He uses hype as a tool to make money, yes.

That money is a thing he needs for the very expensive bucket list item.
Being in a union, it seems, does not give one free rein to donas one wishes with an employer's property...
I’ve seen this issue with younger workers, who try tactics like staying off camera nearly all the time to hide their overemployment setup. It’s harder to manage people in a remote world. And no it’s not a hiring problem because people can be good at interviews and still act like this. Unfortunately they are ruining remote work for everyone else.
I run a mouse jiggler app, because my company laptop has an org-level policy that if you're away from the keyboard for more than a minute, the computer locks and you have to log back in. It would activate when I leaned back in my chair to think about a problem. It would activate when I read a complex piece of documentation. I work at home and have no roommates, so this seems like overkill to me. I got sick of it, so I found a workaround. I think it's a bad policy on their part, and I can't tease out much ethical complexity to my decision to ignore it, though of course if they wanted to fire me for it I would have no basis for complaining.
Good point. If that's what they did the employees should have taken the super low tech route, set your optical mouse on an analog clock.
Show HN: XDeck – An ad-blocking client app for macOS, like TweetDeck
Hi everyone,

XDeck is an client app for macOS as a TweetDeck alternative, with Ad-Blocking!

I developed this for myself after feeling disappointed that TweetDeck has become a paid service.

I hope you find it useful too.
I am talking about user and user-level libraries, so from PyTorch to cuBLAS. The rest is currently serviceable and at time was even slightly better than NVidia. If people start shipping code that targets, say, LLVM IR (that then gets converted to PTX or whatever), like one would do using SYCL, we only have to rely the bare minimum.
Predatory in what sense?
The Supreme Court, the final arbiter of such regulations, disagrees. The court rulings about the law, are the actual law.
Instead of questioning that belief, research why it formed?
let me know if you have any suggestions. i’ll probably try to make it more self contained (e.g. make it possible to install the script into PATH from the extension itself) and eventually get it into Raycast extension store (haven’t read their guidelines yet though)
The unanimity should also be an indicator of the technicality of the decision. This isn't some broad statement on the power of unions or organizing laws, it's a narrow clarification of the set of conditions the NLRB has to meet to grant preliminary injunctions.
They're not shipping people into space with this tech yet. As such, even if QA were missing, which we don't really know much about, the need for QA is way less than you make it out to be. It's not a big deal if a cargo rocket blows up, and so far it hasn't even blown up. Together, this is why your line of comments is unqualified.
Rolling this technology out in practice is quite challenging.

How do you trigger "The Alarm" for a given area? How much of a guard band do you put around the event and what happens when you have false positives? Do you call everyone back to the region and say sorry it was a false alarm, only for it to trigger a week later! Would not want to be the one calling the shots on this.

It also seems like a good technology to throw into a movie plot - Super Mega Quake... starring Dwyane Johnson.
If you've got a Google account you can run it on Colab (probably need to copy it to your account first)
You just to outspend at least 1% on your generative mouse-movement AI.
> I guess my point is that Apple makes it pretty clear from their marketing material that you are getting a tailor made OS for your iPad

This is not clear at all from their video ads.

> This mis-purchase just felt like a springboard to complain about a myriad of tangentially related Apple gripes.

These complains are quite reasonable, see also the comments here: https://news.ycombinator.com/item?id=40349347
Could it be used for voice over satellite, ie Emergency SOS via satellite on iPhones?
No mention of NoLACE make the comparison samples a bit less useful: https://opus-codec.org/demo/opus-1.5/
Where are you getting that? They start conscripting months into the conflict and have never stopped. One of the first measures they took was barring men age 18-60 from leaving the country.

They're predictably secretive about the numbers but they are definitely doing it. A few thousand people were in court for evading the draft last year.
Sources please? Are these nominal dollars?

World bank data in PPP dollars is reported as 64,600 vs 45,900 here:

https://ourworldindata.org/grapher/gdp-per-capita-worldbank?...

Germany is at 53,900 there, but a good chunk of the difference is simply that US works more per capita. GDP per hour worked is 74$ in the US vs 69$ in Germany, 53$ in Canada. Sweden is ahead of the US. And the EU also includes countries like Bulgaria, which at 29$ is barely ahead of Russias 28$.

https://data.oecd.org/lprdty/gdp-per-hour-worked.htm

France is at 65$ per hour worked, but Germany and France also have significantly lower poverty and inequality rates by any measure you chose, with France more equal than Germany.

The US, of course, remains the dominant economy of the world by any measure. There is no question of that. But the exponential nature of economics, and the structural differences between these different economies, means that GDP numbers compared directly are fairly meaningless.

Edit: That last sentence is too strong as stated. GDP obviously matters a big deal in the grand scheme of things, especially as you jump from lower or middle income to high income countries. But it's all logscale. A factor of 2 is a big deal, a factor of 1.2 might not be.
How many web apps running on CrOS care what libc the system is using?
https://archive.is/
https://ghostarchive.org/

Are the sites you are looking for.
I don't know but aren't many of the best comedians in Hollywood/American TV (at least in the 80s and 90s) from Canada?

I guess America was already doing a great job of featuring Canadian talent.
Monitoring anything else than output is a lost cause.
To be honest, I'm just going off the other commenter's testimony; I would have presumed that their internal data access control policies would be... minimal, to be generous. The fact that developers couldn't get access to data to the point that they noticed and it was painful sounds like a genuine good step in the right direction, though.

There is a point that there should be a way of gatekeeping this in a maximally efficient and accountable way but setting the standard of "Access Control" as being that there's friction to gain access seems like a no brainer.
Japan enacts law to curb Apple, Google's app dominance
Some particularly weird parts of that have come when the protection of the union actively conflicts with other employer mandates, like hostile working environments — e.g. from 2015-2017 the NLRB went after Cooper Tire for firing an employee who had used racist slurs on the picket line
HypoTalk: Let's put JavaScript back in the event handlers [video]
Well, because as a security person I can only evaluate his actions from the point of security. Evaluating actions of MS business leadership is beyond my expertise.

I highly doubt that the senior leadership would willingly accept this kind of liability. But you need to put it into right terms for them to understand. Politics play important role at that level as well. There are ways of putting additional pressure on the c-suite, such as making sure certain keywords are used in writing, triggering input from legal or forcing stakeholders to formally sign off on a presented risk.

Without insight knowledge, it's impossible to figure out what went wrong here, so I'm not assigning blame to the whistleblower, just commenting that way too often techies fail to communicate risks effectively.
From a security perspective, you're right.

But most folk (not readers of HN) don't have that perspective. They've none of the requisite technical background, and they've less and less of anything like care for what's good for the enterprise in that regard.
Now do it again, but this time build a fully automated rocket factory on the moon.
I don't understand how this doesn't destroy a company. They willfully ingored a serious risk and it had major national security implications.
Is there compelling evidence for that?
I always assumed it was some kind of bacterial product from early spoilage. Nice to learn!
Debugging HTTP Traffic in kubectl port-forward with KFtray v0.11.7
I did and rather bluntly, your adaptation will be either accepting a new job doing something different or taking far less money to no money for your coding skills to continue doing what you're doing.

In short, coders are the modern day buggy whip manufacturers who are about to get BTFO by the up and coming AI/automobile. It's coming and your nativite hurts.
I don't know what you consider "stable enough", but the 30% packet loss demo in the article is pretty impressive.
FTA:

> Wells Fargo & Co. fired more than a dozen employees last month after investigating claims that they were faking work.

Sounds to me like the employees sucked, they investigated, and found a fireable offense. No PIP, etc. necessary.

That being said, I did a stint in corporate for a large bank, and people spend most of their day trying to find a project to interject themselves into and stay relevant. Turns out, there's really not much to do when you're selling customers their own money. But, people have to justify their existence.
My guess is they dont want the same reasoning applied elsewhere
I think it is in the YNews guidelines not to personally quarrel with other commentators.. maybe we can all do better next time here?
The misaligned incentives between security and profit, especially in public companies, is not really a fixable problem without a massive cultural shift. I'm not sure at this point what could even trigger one.

I've always dabbled in cybersecurity, taking on the hat in various roles over the years but have refused to go full time into it due to what I have personally seen in the industry - an overwhelming focus on compliance rather than actual good security practices, and the compliance standards are either very lacking or poorly enforced.
In some sense, pouring concrete is 3d printing.
The Supreme court isn't though. It's only the final arbiter when congress hasn't explicitly removed that power from them.

This is the supreme court claiming power to itself that it has no right to by the constitution.

The supreme court, according to the article I just cited, is the final arbiter by default, but not by right. Congress can strip that right from them. This is why, for example, the supreme court does not hear military tribunal cases.
Not necessarily, if the training is more efficient, you just throw more data at it for better models which was not possible before
On Windows you can open windows media player and play a silent track on repeat.
Judaism emerged in the most illiterate area of its time.

How do we know this?

The very fact of its emergence (and reliance on written teachings) speaks to the very opposite.
Because it's a compromise that turned a situation that in the past became violent into a peaceful one. Not all rules are written in blood but this one is. So long as everyone plays by the rules the dispute is mediated civilly through the courts instead of the streets.

The best defense against unions forming is strong state and federal labor protections but for the life of me I can't understand why certain folks in power seem hell-bent on rolling them back. They have been incredibly effective in the US, they're not adversarial, and they benefit everyone without workers having to do anything. "Right-to-work" states always act so shocked when workers form unions to get those protections back like that isn't exactly why those laws were passed.
As Nassim Taleb said: "I've seen gluts not followed by shortages, but I've never seen a shortage not followed by a glut."
If there’s going to be a lawsuit, go after Colt before Anthropic.
>I think most of us big sci-fi fans agree that "soft" vs "hard" sci-fi is a false dichotomy. Who knows what is and what will be possible?

It isn't about whether a technology is possible. "Soft SF" is SF where the actual scientific details don't matter. It is about people, their cultures, and their emotions. And really, just a metaphor for our own society. For example a story about how a future VR technology is addictive and causes people to interact less in real life could be just a metaphor for real life smartphone/Internet addiction. The story doesn't need to (and probably doesn't) explain how the VR tech works because it doesn't matter. "Hard SF" actually is based on actual science, and that is the focus of the story. It isn't that one is better than another, but they are different.
I am not. It's been a while since I was subject to peer pressure of that kind. That kind of makes me want to avoid it even more. I don't want to support that kind of thing. But then again, being old and lame, perhaps the opposite of what I do is the definition of cool. Hmm...
Yeah, that's a different issue though. I am talking purely on the exchange of money for services provided.